Skip to content

How to force AAD Sync to perform full synchronization

June 12, 2015

This post relates to Azure Active Directory Sync Services (AAD Sync). For the original Directory Synchronization tool (DirSync), refer to the earlier posts How to force DirSync to perform full synchronization #1 and How to force DirSync to perform full synchronization #2.

AAD Sync only performs a full import automatically when run for the very first time. After that it always defaults to a delta synchronization.

There will be times when you need to force a full import. This is usually indicated by event ID 6127 in the Application log of your AAD Sync server:

Log Name:      Application
Source:        ADSync
Event ID:      6127
Task Category: Management Agent Run Profile
Level:         Warning
The management agent "{management_agent_name}" completed run profile "Delta Import" with a delta import or delta synchronization step type. The rules configuration has changed since the last full synchronization.
User Action
To ensure the updated rules are applied to all objects, a run with step type of full synchronization should be completed.

You typically need to force a full import after making changes to Synchronization Service Manager (miisclient.exe) on your AAD Sync server. This includes modifying any synchronization filters (such as User or OU filters).

To perform a full directory synchronization, open Windows PowerShell as Administrator and run the following commands:

cd \
cd "\Program Files\Microsoft Azure AD Sync\Bin\"
.\DirectorySyncClientCmd.exe Initial
Leave a Comment

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: