Control DirSync Object Synchronization

Launch the Microsoft Identity Integration Server (MIIS) Forefront Identity Manager (FIM) graphical interface, which is installed as part of the DirSync installation. (DirSync is essentially using FIM behind the scenes.) This can be done by launching miisclient.exe, which is found in C:Program FilesWindows Azure Active Directory SyncSYNCBUSSynchronization ServiceUIShell.

Select the Management Agents tab.

Right-click the Active Directory Connector and select Properties.

Select the Configure Directory Partitions node.

Click the Containers button, which will prompt you for a credential. Replace the username and password with an administrator account and click OK.

Select only the OUs you want to have synchronized, as the following figure shows, and click OK.

 

Click OK in all the subsequent dialog boxes. Only the selected objects will now replicate.

If you want to change the rules for which objects replicate, you can do so via the same connector properties; select Configure Connector Filter, then select the user object to display all the filter rules, which you can then customize (see the following figure).