As an IT admin, there are certain tasks and process that happen almost daily. We’re using customer feedback to identify those common tasks and make them easier and faster to perform with repeatable r...
Updated May 06, 2021
Version 2.0
Blog Post
With regards to hybrid configurations - we disable the on-prem AD account as well as removing licenses in O365 and converting to a shared mailbox. To "delete" the user, we move the disabled AD account to an OU that is outside of sync scope for Azure AD Connect. This has basically the same effect as deleting the user in Azure AD.
I will say we don't do any of this manually. We have a PowerShell script our Service Desk staff runs that basically does it all. (We also change a lot more than what's listed in this article, such as automatically setting an Autoreply message, disabling ActiveSync, resetting the password, removing their picture, hiding the user from Address Books, removing the user from distribution and Modern groups, etc., etc.)