Forum Discussion

TobiasAT's avatar
TobiasAT
Iron Contributor
Mar 27, 2018
Solved

Get-AzureADMSDeletedGroup vs. 'Get-UnifiedGroup -IncludeSoftDeletedGroups'

Hello, I have a question reqarding deleted Office 365 Groups. I have the two scenarios: 1st: I run "Get-AzureADMSDeletedGroup | ?{$_.DeletedDateTime -gt $DeletedGroupsStartDate }" and get 5 de...
Office 365 Groups
  • TobiasAT's avatar
    TobiasAT
    May 09, 2018

    Yesterday I found the cause. There are 2 issues preventing the EXO and AAD cmdlets returning the same results for deleted groups.

     

    1. The time zone in AAD is UTC, EXO returns the results in the local time. So I changed the date filter for deleted groups in AAD to UTC.
    2.  The main issue is Get-AzureADMSDeletedGroup does not return all deleted groups by default (and shows not information the results are limited). The cmdlet provides an additional parameter All.

    Get-AzureADMSDeletedGroup -all:$true

     

    -All
    If true, return all group members. If false, return the number of objects specified by the Top parameter

     

    Without the parameter Get-AzureADMSDeletedGroup returns just 100 results and the date filter was not applied to all deleted groups in AAD.

    I did the same tests, one for the last 5 days and one for 30 days. Both commands include now the same results.

     

TobiasAT's avatar
TobiasAT
Iron Contributor
Apr 13, 2018

I just want to post an update. My case is still in progress. It`s now confirmed the situation is an unknown behavior. In general the 2 commands do the same. What we know is some deleted Office 365 Groups in Exchange Online are synced to the Azure AD recycle bin with a very, very long delay. I can reproduce a delay of min. 5 days. For the last 30 days I have currently 57 deleted groups that have not yet been synchronized from EXO to AAD. The EXO and AAD support teams try to get an official time range, or maybe they have an issue with the sync. 

 

In general all customers should be able to reproduce the situation, at least if you are in the region Europe West.

VasilMichev's avatar
VasilMichev
MVP
Apr 14, 2018

Definitely sounds like a replication issue, and one that should be taken care of in a timely manner. The SLAs for that sync process should be in the range of hours, definitely not days. Anyway, cfiessinger might be able to get right people involved.

  • TobiasAT's avatar
    TobiasAT
    Iron Contributor
    May 09, 2018

    Yesterday I found the cause. There are 2 issues preventing the EXO and AAD cmdlets returning the same results for deleted groups.

     

    1. The time zone in AAD is UTC, EXO returns the results in the local time. So I changed the date filter for deleted groups in AAD to UTC.
    2.  The main issue is Get-AzureADMSDeletedGroup does not return all deleted groups by default (and shows not information the results are limited). The cmdlet provides an additional parameter All.

    Get-AzureADMSDeletedGroup -all:$true

     

    -All
    If true, return all group members. If false, return the number of objects specified by the Top parameter

     

    Without the parameter Get-AzureADMSDeletedGroup returns just 100 results and the date filter was not applied to all deleted groups in AAD.

    I did the same tests, one for the last 5 days and one for 30 days. Both commands include now the same results.

     

Resources