
In this article, I will show you how to manage these situations in an environment with hybrid configuration and Centralized Mail Transport enabled. A user has an account in Office 365 with an Exchange Online license assigned as well as an account in local AD with an on-premises Exchange mailbox (a single user has two separate mailboxes).A user has an account in Office 365 and in local AD (this user had two accounts before the hybrid configuration was implemented to have access to services offered by Office 365).A user has an Office 365 account and no local AD account.But this can also happen the other way round when you run the synchronization from Office 365 to on-premises AD or in both directions. You can encounter these problems when you run the synchronization from on-premises AD to Office 365. In other words, perhaps an OU that contains a certain user object, group or computer was not selected in the AAD Connect configuration wizard. The improper scope of objects synchronized with Office 365.Lack of rights to Organizational Units (OU) or AD objects (users, groups or computers) for a service account used by Azure AD Connect (AAD Connect).If you hit the roadblock during the synchronization it is most probable that the problem will be related to user synchronization between local Active Directory and Azure AD.


And if that is the case, you need to do some additional adjustments. After a quick verification whether the hybrid is set up correctly, you notice that some of the users are not synchronized properly. Once you have completed a hybrid configuration in your company, it turns out that the job is not done yet.

: This post was updated on January 27, 2021.
