Forum Discussion

Copper Contributor

Apr 29, 2019

Solved

How to list users synced from onprem AD and cloud-only users?

Hello guys! I was tasked to list users synced from onprem AD and cloud only users I have downloaded and imported AzureAD PS module 2.0.2.16 Azure portal shows several users with source 'A...

Azure Active Directory (AAD)

Identity Management

Martin Rublik
Apr 29, 2019
Teijo Hämäläinen I would try following Get-MsolUser -All | ?{-not $_.lastdirsynctime}

VasilMichev

MVP

Apr 29, 2019

There's also Get-MsolUser -Synchronized. Using the server-side filtering is faster approach, and also makes sure you don't get a trimmed list because of hitting the limit for number of objects returned (like when you have the Get-AzureADUser cmdlet above, without the -All switch, and filtering client-side).

Martin Rublik

Brass Contributor

Apr 30, 2019

thanks, definitely a better solution.

Martin

Scorpio69
Copper Contributor
May 04, 2019
Martin RublikThere is another easier option to use it. Cloud only and on prem users have big difference - Its called Immutable ID

So Get-MsolUser | where-Object {$_.ImmutableId -eq $null} -> for On prem users
Get-MsolUser | where-Object {$_.ImmutableId -ne $null} for Azure AD users ( Cloud users)
- AndrePKI
  Iron Contributor
  Oct 12, 2020
  Scorpio69 Definitively need -All switch to get all users.
  Get-MsolUser -All | where-Object {$_.ImmutableId -eq $null}
- ITCTF
  Brass Contributor
  Apr 22, 2020
  Scorpio69
  
  I think should be other way around 🙂
  
  Get-MsolUser | where-Object {$_.ImmutableId -eq $null} -> for Azure AD cloud users;
  Get-MsolUser | where-Object {$_.ImmutableId -ne $null} -> for On premise users;