Filtering the sync target object in Entra ID Connect Sync

  • Assumption
    • You already configured the scheduled Entra ID connect Sync from your on-premises AD domain.
    • You have the need that the sync target object is limited to particular users or groups.

ref: Microsoft Entra Connect Sync: Configure filtering – Microsoft Entra ID | Microsoft Learn

  • Step for filtering targets in OU
    • Log onto the Server having the Entra ID Connect Sync service running on.
    • From Start “Azure AD Connect” -> “Azure AD Connect”.

    • “Configure” -> Select “Customize Synchronization options” and “Next”


    • Specify the Connect Service User credential and Next.

    • Keep your On-Premises AD Forest target and Next.

    • Now, we should select the OU where the Users/Groups will be synced from to Entra ID.
      In below, the users and groups are collected from only “OU=Resources,DC=avalon,DC=toshitoshi,DC=net”.

    • Optional Feature will un-change at this time. keep it as is. And Next.

    • You completed the filter adjustment.