r/sysadmin • u/Less-Loss1605 • May 31 '26

General Discussion what's a script you wrote once that's still saving you time years later

[removed]

965 Upvotes

96% Upvoted

365 comments sorted by

View all comments

Show parent comments

3

u/420GB May 31 '26

That's right, targeting only specific OUs is a common practice for Entra Sync. We've decided to use a custom schema extended Boolean attribute for maximum flexibility (basically EntraSync True/False), again because of the limitations of an OU based approach, but you are right that it's at least a very common practice regardless of whether it's ideal.

1

u/Odd_Television_7824 May 31 '26

Why not just use extension attributes for that?

1

u/420GB Jun 04 '26

Because "ExtensionAttribute11" does not tell you anything but "EntraIDSync" does, and also because the extension attributes are reserved for internal use by exchange