This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi,
During ADSync setup, I accidentally excluded a OU which contained all the disabled users (over 500) with shared mailboxes on them. What is the best way to restore them?
Thank,
KW
It sure does look like the issue is resolved. Thank you!
Usually you mark the answer that helped you get the solution, not your own :)
Include the OU back in the sync and they will be restored. Right now the accounts and mailboxes are only soft-deleted in 365.
That is what I'm planning to do. But in the past, this hadn't work for us. We had to restore and re-map the mailboxes one by one. Perhaps we did not wait long enough? How long should I wait for it to complete?
Sync runs every 30 minutes or you can run it manually after you uncheck that OU exclusion
https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-scheduler
Start-ADSyncSyncCycle -PolicyType Delta
Not sure what you mean by re-mapping. Once the sync has completed to Azure, the accounts should be restored along with the mailboxes.
Ive seen cases in the past where a shared mailbox is 365 is not restored and a Exo License was needed for that account, but that is not typical.
I reversed what I did. The mailboxes are back and all of them are marked as 'Sign-in blocked'. Can you share a powershell script on Unblocked sign-in?
I thought they were disabled users? They should be set as blocked. That's by design.
That doesnt prevent users with full mailbox rights accessing them.
You are correct. the account should be blocked from signing in.
What I want to know is, are the original user access permissions to those shared mailboxes restored? I have randomly checked a few, and the access permissions seem restore as well.
Yes, the permissions are in the mailbox, so they are restored,. Sounds like you a good to go!
If you could, please mark an answer as accepted, thanks!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 22%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELL%3C/text%3E%3C/svg%3E)
Hi @Anonymous ,
Agree with what Andy said.
You could unbolcked sign-in in microsoft 365 admin center, click the Active Users and select the user account you want to unblocked. You could also use Windows Powershell to unblock sign-in as described in this article (Block Microsoft 365 user accounts with PowerShell). You could unblocked access for multiple user account by using windows powershell.
----------
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Nice. Thank you for the PS script
Hi @Anonymous ,
I am glad to hear that your issue has been resolved.
----------
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.