Category: Office 365

New version of Azure AD Sync
article #1249, updated 5 days ago

New version, as of 2018-10-29:

Categories:   Azure   Office 365


Azure AD Sync: password sync fails but directory sync working
article #1243, updated 33 days ago

When this happens, do the following in Azure AD Connect:

  1. In “Customize synchronization options”, disable (uncheck) the password hash sync option.
  2. Wait for sync to complete, watching in the Operations tab of the Synchronization Service Manager.
  3. In “Customize synchronization options”, enable (check) the password hash sync option.
  4. Wait for sync to complete, watching in the Operations tab of the Synchronization Service Manager.
  5. Check the Office 365 admin readout.

Categories:   Office 365   


Remove Office 365 activation from Windows
article #1241, updated 36 days ago

From the indefatigable Mike Crayton:

Categories:   Office 365   


"AdxTaskPane" window comes up with Outlook
article #1237, updated 65 days ago

When recent versions of Outlook and other Office applications run certain plugins, sometimes the result will come up in a separate window called “AdxTaskPane”. To prevent this:

  1. File > Options > General > User Interface options
  2. Choose “Optimize for compatibility (application restart required)”
  3. Restart the application

Categories:   Microsoft Office   Office 365


Office 365 / Exchange Online Mailbox Migration Stall
article #1232, updated 71 days ago

When you do an Office 365 / EOL migration with Azure AD Sync in place, mailboxes may freeze up, where in the O365 console under “Mail Settings” for one or more mailboxes, it says “This user’s on-premises mailbox has not been migrated to Exchange Online. The Exchange Online mailbox will be available once migration is completed.” One may spend a whole lot of time, even with Microsoft on the line, not fixing this problem.

There may be more than one cause. But a very important cause and fix is outlined here:

The gist of it is, one of the user attributes synched up from the on-prem server is “msExchMailboxGuid”, and this is trouble, because if this is synched up, EOL thinks it is trying to make a duplicate of an existing mailbox, rather than a new one, and it will not make a duplicate, it is in fact waiting for this attribute to be deleted before proceeding.

So what we do, is we go to Synchronization Service, right-click on “Active Directory Domain Services”, make sure “Connector Designer” is selected, and then scroll down to msExchMailboxGuid , and uncheck it. Then click OK.

The next step is to kick off a sync. The easiest way is in Powershell on the server which has AD Sync installed:

Import-Module ADSync
Start-ADSyncSyncCycle -PolicyType Initial

You can watch the progress in “Synchronization Service” if you like; after the two final exports are complete it is done. But we’re not done yet.

The next step, is to remove the licenses from all of the O365 accounts which are marked as not yet migrated.

Then run another sync.

Then add the licenses back.

And run another sync.

That did it this morning!

Categories:   Office 365   Azure


Run Azure AD Sync by Powershell
article #1231, updated 71 days ago

These two will do it in the current version as of this writing:

Import-Module ADSync
Start-ADSyncSyncCycle -PolicyType Initial 

The above is a full sync, necessary in a minority of circumstances. A delta sync is as follows:

Import-Module ADSync
Start-ADSyncSyncCycle -PolicyType Delta

Categories:   Office 365   Azure


Office 365 and Exchange Online Product and License Lists
article #1195, updated 88 days ago

There are many different products / licenses for Office 365, in several categories. The first item has links to the rest:

Business, general

Small business





Firstline Workers

Categories:   Office 365   


Connect PowerShell to Exchange Online / Office 365
article #804, updated 269 days ago

Contributed by the excellent Matt Quick:

$msolcred = get-credential
connect-msolservice -credential $msolcred
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri -Credential $msolcred -Authentication Basic –AllowRedirection
Import-PSSession $Session

Categories:   Exchange and Exchange Online   Office 365


Give Exchange Online users ability to manage distribution lists
article #1118, updated 381 days ago

From the profound Mike Crayton. We do this:

  1. Create an admin role group named “Manage Distribution Groups”, with the admin role of “Distribution Groups”, setting as members the user(s) to be given this ability
  2. Give them this URL for getting to the management console:

Categories:   Exchange and Exchange Online   Office 365


DKIM settings for Office 365 and Exchange Online
article #1031, updated 393 days ago

These are not very documented, and at least at this writing, the informatives in the console were incomplete. Here’s the steps I have working at this writing, postulating the domain at hand being “”:

  1. First, in the O365 Exchange administrative console, go to the Protection area, and the rightmost tab is “dkim”, click on that. Then try to Enable any which are disabled. You will see an error message which says you need to create two CNAMEs. The two strings given, are the alias targets, the alias names are not given. Use these in the next step.
  1. Set CNAMEs in Internet DNS. The alias names are the same every time; the targets are taken from the error message in step 1. They are not always entirely predictable, sometimes you will see “0i” buried within and there may be other variations. But the result will not be very distant from this:
TTL 3600
TTL 3600

  1. Once your DNS changes have propagated thoroughly, go back to step #1 and try to enable DKIM again for the domain whose records you have just changed. If you have done your CNAMEs correctly, O365 will turn DKIM on. You may need to wait for DNS propagation.

Categories:   Office 365   Exchange and Exchange Online