How to Remove an onmicrosoft.com Address from a Synced User in Exchange
Question details
The user needs to remove an unwanted onmicrosoft.com email alias that continues to display for a synced user in Outlook or Teams.

- Product
- Microsoft Exchange Online, Outlook, Teams
- Device & OS
- not provided
- Scenario
- An organization using a custom domain as the primary email address notices that an onmicrosoft.com address still appears for a user. Standard Exchange admin center deletion fails because the account is mastered on-premises.
- Observed behavior
- The onmicrosoft.com address persists in Outlook and Teams, and attempts to remove it via the Exchange admin center are blocked due to on-premises directory mastering.
Ensure you have administrative access to your on-premises Active Directory and the server running Azure AD Connect to modify directory attributes and initiate a manual synchronization.
Update On-Premises Attributes and Run Delta Synchronization
Since the user object is mastered on-premises, you must modify the proxyAddresses attribute locally and force an Azure AD Connect sync to push the changes to Microsoft Entra ID and Exchange Online.
When user accounts are synchronized from an on-premises Active Directory to Microsoft 365, attributes like email aliases are strictly controlled by the local AD environment. Any modifications must be made there and synchronized upward.
Open Active Directory Users and Computers (ADUC) on your on-premises server. Ensure 'Advanced Features' is enabled under the View menu. Right-click the affected user, select 'Properties', and navigate to the 'Attribute Editor' tab. Locate the 'proxyAddresses' attribute and remove the unwanted onmicrosoft.com address.
Open an elevated PowerShell prompt on the server running Azure AD Connect. Execute the command `Start-ADSyncSyncCycle -PolicyType Delta` to force a synchronization of your recent on-premises changes to the cloud.
Wait a few minutes for the changes to replicate to Microsoft Entra ID and Exchange Online. Check the user's profile in the Microsoft 365 admin center or Exchange admin center to confirm the address has been successfully removed.
Looking for a Lightweight Alternative for Your Organization's Documents?
While resolving complex enterprise email and directory sync issues, you might also be looking for a highly compatible, cost-effective office suite for your organization's daily document needs. WPS Office offers a lightweight, free alternative that easily integrates with your existing workflows.
- 1. Download WPS Office: Navigate to the official WPS website and download the installation package tailored to your Windows, Mac, or Linux operating system.
- 2. Install the Suite: Run the setup file and follow the standard on-screen prompts to deploy the lightweight office suite on your workstation.
- 3. Open Existing Microsoft Formats: Launch WPS Office and directly open your existing .docx, .xlsx, or .pptx files to enjoy seamless format compatibility without needing any conversions.

Frequently Asked Questions
Why can't I delete the onmicrosoft.com address directly in the Exchange Admin Center?
When your organization uses Azure AD Connect for directory synchronization, the authoritative source for user attributes is your on-premises Active Directory. The Exchange Admin Center blocks cloud-side edits to prevent data conflicts and overwrites during the next sync cycle.
What happens if the onmicrosoft.com address still appears after running the delta sync?
If the address persists, double-check the 'proxyAddresses' and 'targetAddress' attributes in your on-premises AD to ensure the alias was fully removed. Additionally, check if an on-premises Email Address Policy is automatically re-applying the alias.
How long does it take for Outlook and Teams to update after the address is removed?
While the cloud directory updates relatively quickly after the Azure AD Connect sync completes, offline clients like Outlook rely on the Offline Address Book (OAB), which typically updates once every 24 hours. Teams caching can also take up to 24-48 hours to clear entirely.
Where can I get help if the synchronization completely fails?
If synchronization fails, you can review the sync logs in the Synchronization Service Manager on your Azure AD Connect server. For further assistance, submit a request through the Microsoft Entra ID support forum or Microsoft 365 admin center.




