AD Sync Error 114 Deleting Cloud Only Object Not Allowed – Fix! - Attenu8

AD Sync Error 114 Deleting Cloud Only Object Not Allowed – Fix!

26 May 2022 | Business

If like me you’ve been caught out by this dreaded error and spent time banging your head against the wall, then the below fix will save you.

The scenario i’ve experienced the 114 error in is as follows.

– AzureAD Synchronised user to 365 is deleted.

– Deletion synchronised to 365

– User recovered from deleted users

It seems that a second synchronisation needs to take place before you recover the user from deleted and have them as a cloud only user.

So to fix it’s powershell to the rescue:

Once signed into 365 powershell you need to conenct to azuread so run:

connect-azuread

then

Get-AzureADUser -ObjectId “testUpn@tenant.com” this will give the objectid

e.g. get-azureaduser -objectid testupn@tenant.com

now connect to msol

connect-msolservice

Set-MsolUser -ObjectId ‘<user’s object ID>’ -ImmutableId “$null”‘

e.g. set-msoluser -objectid ffda6247-8fdd-4dfa-b180-723c784b2fe4 -immutableid “$null”

That’s it – you’re done. The next synchronisation will complete without error

More from Business