How to Fix Cannot Remove Email Alias from Microsoft 365 User
Question details
The user is unable to remove an old email alias from a Microsoft 365 user account due to Azure Active Directory synchronization errors.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to delete an unwanted email alias for a Microsoft 365 user who is synchronized from a local AD environment.
- Observed behavior
- An Azure Active Directory synchronization error is triggered, preventing the removal of the email alias from the cloud platform.
Verify whether your Microsoft 365 user accounts are cloud-only or if they are synchronized from an on-premises Active Directory using Azure AD Connect.
Update the ProxyAddresses Attribute in Local Active Directory
Use this method if your Microsoft 365 users are synchronized via Azure AD Connect. Changes must be made on-premises to avoid sync conflicts.
When Azure AD Connect is enabled, the cloud environment relies on the on-premises Active Directory as the source of truth. Attempting to remove an alias directly from the Microsoft 365 admin center will fail or cause a synchronization conflict.
Log in to your domain controller and launch the Active Directory Users and Computers (ADUC) snap-in.
Click on the 'View' menu at the top and verify that 'Advanced Features' is checked. This is required to see the Attribute Editor.
Navigate to the specific user whose alias needs removal, right-click their name, select 'Properties', and click on the 'Attribute Editor' tab.
Scroll down to the 'proxyAddresses' attribute and double-click it. Select the old email alias (smtp:oldalias@domain.com) you wish to delete and click 'Remove'.
Click 'OK' to save your changes. You can then wait for the next scheduled Azure AD Connect sync cycle or force a delta sync manually using PowerShell.
Remove Alias via Microsoft 365 Admin Center
If the user is cloud-only (not synced from an on-premises AD), manage their aliases directly in the web admin center.
Looking for a Lightweight Alternative to Microsoft 365?
Managing complex Microsoft 365 admin settings and Azure AD syncing can be overwhelming. If your team simply needs a reliable, hassle-free productivity suite without the complex administrative overhead, consider WPS Office. It provides powerful word processing, spreadsheets, and presentation tools in one lightweight package.
Frequently Asked Questions
Why do I get a synchronization error when removing a Microsoft 365 alias?
This occurs because the user account is managed by an on-premises Active Directory. The cloud platform detects a mismatch between the cloud settings and the on-premises 'proxyAddresses' attribute, blocking the change to protect the directory integrity.
How do I manually force Azure AD Connect to sync my changes immediately?
You can force a sync by opening PowerShell as an administrator on your Azure AD Connect server and running the command: Start-ADSyncSyncCycle -PolicyType Delta.
Can I remove a primary email address instead of an alias?
You cannot directly delete a primary email address. You must first designate a different alias as the primary address. Once the primary address is updated, the old primary address becomes a standard alias, which can then be removed.
How do I know if a user is cloud-only or synchronized?
In the Microsoft 365 admin center, go to the 'Active users' list. Check the 'Sync status' column, which will clearly indicate whether the user is 'In cloud' or 'Synced from on-premises'.
