Delete synced AD users and groups from Azure AD

In this post, I will explain how to remove users or groups from Azure AD that were synchronised into Azure AD (your tenant) but are left behind after removing Azure AD Connect . In other words, you cannot delete them from Azure portal as the ‘Delete’ option will be greyed out.

We need to use Azure AD PowerShell to make this work.
Install the PowerShell Module first (using an elevated console) from PowerShell gallery.

Install-Module -Name Az -AllowClobber

By default, the PowerShell gallery isn’t configured as a trusted repository for PowerShellGet. The first time you use the PSGallery you see the following prompt:
Untrusted repository You are installing the modules from an untrusted repository. If you trust this repository, change its InstallationPolicy value by running the Set-PSRepository cmdlet. Are you sure you want to install the modules from ‘PSGallery’? [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is “N”):

Answer Yes or Yes to All to install the module.

After the module is installed, connect to Azure with a browser sign in token
Connect-AzAccount
This will bring up the sign-in page for you to login using Azure credentials.

This image has an empty alt attribute; its file name is image-1.png

#Import the module
Import-Module Az

Delete ADUsers
The below command will get all the AD users into a .csv file.
Get-AzADUser | select DisplayName | Export-Csv C:\temp\azusers.csv -NoTypeInformation

Open the azusers.csv file and remove the Global Administrator account.
Next type the below command to remove all the synced users in Azure:
Import-Csv C:\temp\azusers.csv | Remove-AzADUser -force

Delete AD Groups
Get all the AD Groups using
Get-AzADGroup
Note the Object ID for the groups.

To delete AD Groups use the below shown command.

Using the above PowerShell method we can easily delete the synced users and Groups.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s