Azure AD Connect Password SyncCan I use Office365 or Azure AD as master record for Active Directory?Dynamics CRM with Windows Essentials AD + Azure ADSync AD from multiple on-premise server to Office 365The specified module 'MSOnline' was not loaded because no valid module file was found in any module directoryAzure AD Connect ADSync error 0x80230613Password reset not working because password writeback not working in portal.azure.comOffice365 with AD FS Without Azure ADOWA error “OpenIdConnectIdpException”Re-install Azure AD Connect failsHow to edit migration details to Office 365

How do I find and plot the intersection of these three surfaces?

Does the UK have a written constitution?

How come I was asked by a CBP officer why I was in the US when leaving?

Generate and graph the Recamán Sequence

How can I check type T is among parameter pack Ts... in C++?

Signing using digital signatures?

How would a order of Monks that renounce their names communicate effectively?

Dual statement category theory

“Transitive verb” + interrupter+ “object”?

The difference between Rad1 and Rfd1

Why does the A-4 Skyhawk sit nose-up when on ground?

Procedurally generate regions on island

Do 3D printers really reach 50 micron (0.050mm) accuracy?

Confusion about multiple information Sets

Should I hide continue button until tasks are completed?

Zombie Diet, why humans

Professor Roman gives unusual math quiz ahead of

A player is constantly pestering me about rules, what do I do as a DM?

How well known and how commonly used was Huffman coding in 1979?

What speedlites can work with the Canon EOS 4000D's non-standard hotshoe?

Dold-Kan correspondence in the category of symmetric spectra

How to convert object fill in to fine lines?

Why is the Turkish president's surname spelt in Russian as Эрдоган, with г?

How to determine what is the correct level of detail when modelling?



Azure AD Connect Password Sync


Can I use Office365 or Azure AD as master record for Active Directory?Dynamics CRM with Windows Essentials AD + Azure ADSync AD from multiple on-premise server to Office 365The specified module 'MSOnline' was not loaded because no valid module file was found in any module directoryAzure AD Connect ADSync error 0x80230613Password reset not working because password writeback not working in portal.azure.comOffice365 with AD FS Without Azure ADOWA error “OpenIdConnectIdpException”Re-install Azure AD Connect failsHow to edit migration details to Office 365






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;








7















Windows 2012 R2, fully updated/activated
Roles: ADDS, ADFS
Installed Azure AD Connect latest version (only software installed other than updates)



Other applicable services: Office 365 (Business Premium licensing), Azure AD Premium



Having a problem with password writeback. I am able to reset a user password on the local AD and have the changes reflected in Azure AD and Office 365, however when I reset a user password on Office 365, changes are not applied elsewhere.



I am using the built-in Administrator account as the ADMA in this instance and applied the appropriate permissions:
*Reset Password
*Change Password
*Write lockoutTime
*Write pwdLastSet



Azure AD service account being used is set to Global Administrator and Azure AD Connect verifies credentials successfully.



Noteworthy to mention the coveted 31005 event ID has not appeared in the Windows Application event logs since initial deployment of Azure AD Connect.



Event log errors that may be applicable to this issue:



Event ID: 0 Source: Directory Synchronization -- "An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. SetCredential() failed. Contact Technical Support. (0x8009000B)"



Event ID: 109 Source: Directory Synchronization -- "Failure while prefetching import data."



Event ID: 6801 Source: ADSync -- "The extensible extension returned an unsupported error.
The stack trace is:



"Microsoft.Online.Coexistence.ProvisionException: An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. ---> Microsoft.Online.Coexistence.Security.WindowsLiveException: SetCredential() failed. Contact Technical Support.
at Microsoft.Online.Coexistence.Security.LiveIdentityManager.OpenIdentity(String federationProviderId, String userName, String password)
at Microsoft.Online.Coexistence.ProvisionHelper.GetLiveCompactToken(String userName, String userPassword)
--- End of inner exception stack trace ---
at Microsoft.Azure.ActiveDirectory.Connector.GetImportEntriesTask.GetNextBatch()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntriesCore()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntries(GetImportEntriesRunStep getImportEntriesRunStep)
Azure AD Sync 1.0.8667.0"



Event ID: 6803 Source: ADSync -- "The management agent "domain.com - AAD" failed on run profile "Delta Import" because the server encountered errors"



Any help would be great. I'm sure someone will let me know if I left anything necessary out.










share|improve this question






















  • Ever get this figured out?

    – willWorkForCookies
    Feb 4 '16 at 0:38











  • Did you make it work?

    – Andres
    Aug 23 '16 at 13:45

















7















Windows 2012 R2, fully updated/activated
Roles: ADDS, ADFS
Installed Azure AD Connect latest version (only software installed other than updates)



Other applicable services: Office 365 (Business Premium licensing), Azure AD Premium



Having a problem with password writeback. I am able to reset a user password on the local AD and have the changes reflected in Azure AD and Office 365, however when I reset a user password on Office 365, changes are not applied elsewhere.



I am using the built-in Administrator account as the ADMA in this instance and applied the appropriate permissions:
*Reset Password
*Change Password
*Write lockoutTime
*Write pwdLastSet



Azure AD service account being used is set to Global Administrator and Azure AD Connect verifies credentials successfully.



Noteworthy to mention the coveted 31005 event ID has not appeared in the Windows Application event logs since initial deployment of Azure AD Connect.



Event log errors that may be applicable to this issue:



Event ID: 0 Source: Directory Synchronization -- "An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. SetCredential() failed. Contact Technical Support. (0x8009000B)"



Event ID: 109 Source: Directory Synchronization -- "Failure while prefetching import data."



Event ID: 6801 Source: ADSync -- "The extensible extension returned an unsupported error.
The stack trace is:



"Microsoft.Online.Coexistence.ProvisionException: An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. ---> Microsoft.Online.Coexistence.Security.WindowsLiveException: SetCredential() failed. Contact Technical Support.
at Microsoft.Online.Coexistence.Security.LiveIdentityManager.OpenIdentity(String federationProviderId, String userName, String password)
at Microsoft.Online.Coexistence.ProvisionHelper.GetLiveCompactToken(String userName, String userPassword)
--- End of inner exception stack trace ---
at Microsoft.Azure.ActiveDirectory.Connector.GetImportEntriesTask.GetNextBatch()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntriesCore()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntries(GetImportEntriesRunStep getImportEntriesRunStep)
Azure AD Sync 1.0.8667.0"



Event ID: 6803 Source: ADSync -- "The management agent "domain.com - AAD" failed on run profile "Delta Import" because the server encountered errors"



Any help would be great. I'm sure someone will let me know if I left anything necessary out.










share|improve this question






















  • Ever get this figured out?

    – willWorkForCookies
    Feb 4 '16 at 0:38











  • Did you make it work?

    – Andres
    Aug 23 '16 at 13:45













7












7








7


1






Windows 2012 R2, fully updated/activated
Roles: ADDS, ADFS
Installed Azure AD Connect latest version (only software installed other than updates)



Other applicable services: Office 365 (Business Premium licensing), Azure AD Premium



Having a problem with password writeback. I am able to reset a user password on the local AD and have the changes reflected in Azure AD and Office 365, however when I reset a user password on Office 365, changes are not applied elsewhere.



I am using the built-in Administrator account as the ADMA in this instance and applied the appropriate permissions:
*Reset Password
*Change Password
*Write lockoutTime
*Write pwdLastSet



Azure AD service account being used is set to Global Administrator and Azure AD Connect verifies credentials successfully.



Noteworthy to mention the coveted 31005 event ID has not appeared in the Windows Application event logs since initial deployment of Azure AD Connect.



Event log errors that may be applicable to this issue:



Event ID: 0 Source: Directory Synchronization -- "An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. SetCredential() failed. Contact Technical Support. (0x8009000B)"



Event ID: 109 Source: Directory Synchronization -- "Failure while prefetching import data."



Event ID: 6801 Source: ADSync -- "The extensible extension returned an unsupported error.
The stack trace is:



"Microsoft.Online.Coexistence.ProvisionException: An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. ---> Microsoft.Online.Coexistence.Security.WindowsLiveException: SetCredential() failed. Contact Technical Support.
at Microsoft.Online.Coexistence.Security.LiveIdentityManager.OpenIdentity(String federationProviderId, String userName, String password)
at Microsoft.Online.Coexistence.ProvisionHelper.GetLiveCompactToken(String userName, String userPassword)
--- End of inner exception stack trace ---
at Microsoft.Azure.ActiveDirectory.Connector.GetImportEntriesTask.GetNextBatch()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntriesCore()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntries(GetImportEntriesRunStep getImportEntriesRunStep)
Azure AD Sync 1.0.8667.0"



Event ID: 6803 Source: ADSync -- "The management agent "domain.com - AAD" failed on run profile "Delta Import" because the server encountered errors"



Any help would be great. I'm sure someone will let me know if I left anything necessary out.










share|improve this question














Windows 2012 R2, fully updated/activated
Roles: ADDS, ADFS
Installed Azure AD Connect latest version (only software installed other than updates)



Other applicable services: Office 365 (Business Premium licensing), Azure AD Premium



Having a problem with password writeback. I am able to reset a user password on the local AD and have the changes reflected in Azure AD and Office 365, however when I reset a user password on Office 365, changes are not applied elsewhere.



I am using the built-in Administrator account as the ADMA in this instance and applied the appropriate permissions:
*Reset Password
*Change Password
*Write lockoutTime
*Write pwdLastSet



Azure AD service account being used is set to Global Administrator and Azure AD Connect verifies credentials successfully.



Noteworthy to mention the coveted 31005 event ID has not appeared in the Windows Application event logs since initial deployment of Azure AD Connect.



Event log errors that may be applicable to this issue:



Event ID: 0 Source: Directory Synchronization -- "An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. SetCredential() failed. Contact Technical Support. (0x8009000B)"



Event ID: 109 Source: Directory Synchronization -- "Failure while prefetching import data."



Event ID: 6801 Source: ADSync -- "The extensible extension returned an unsupported error.
The stack trace is:



"Microsoft.Online.Coexistence.ProvisionException: An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. ---> Microsoft.Online.Coexistence.Security.WindowsLiveException: SetCredential() failed. Contact Technical Support.
at Microsoft.Online.Coexistence.Security.LiveIdentityManager.OpenIdentity(String federationProviderId, String userName, String password)
at Microsoft.Online.Coexistence.ProvisionHelper.GetLiveCompactToken(String userName, String userPassword)
--- End of inner exception stack trace ---
at Microsoft.Azure.ActiveDirectory.Connector.GetImportEntriesTask.GetNextBatch()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntriesCore()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntries(GetImportEntriesRunStep getImportEntriesRunStep)
Azure AD Sync 1.0.8667.0"



Event ID: 6803 Source: ADSync -- "The management agent "domain.com - AAD" failed on run profile "Delta Import" because the server encountered errors"



Any help would be great. I'm sure someone will let me know if I left anything necessary out.







windows windows-server-2012 microsoft-office-365 azure-active-directory






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Sep 22 '15 at 16:49









Brandon WetterBrandon Wetter

1015 bronze badges




1015 bronze badges












  • Ever get this figured out?

    – willWorkForCookies
    Feb 4 '16 at 0:38











  • Did you make it work?

    – Andres
    Aug 23 '16 at 13:45

















  • Ever get this figured out?

    – willWorkForCookies
    Feb 4 '16 at 0:38











  • Did you make it work?

    – Andres
    Aug 23 '16 at 13:45
















Ever get this figured out?

– willWorkForCookies
Feb 4 '16 at 0:38





Ever get this figured out?

– willWorkForCookies
Feb 4 '16 at 0:38













Did you make it work?

– Andres
Aug 23 '16 at 13:45





Did you make it work?

– Andres
Aug 23 '16 at 13:45










1 Answer
1






active

oldest

votes


















0














I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.



I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.






share|improve this answer

























    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "2"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f724068%2fazure-ad-connect-password-sync%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.



    I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.






    share|improve this answer



























      0














      I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.



      I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.






      share|improve this answer

























        0












        0








        0







        I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.



        I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.






        share|improve this answer













        I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.



        I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Oct 3 '15 at 19:22









        Jesus ShelbyJesus Shelby

        1,1048 silver badges14 bronze badges




        1,1048 silver badges14 bronze badges



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Server Fault!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f724068%2fazure-ad-connect-password-sync%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Wikipedia:Vital articles Мазмуну Biography - Өмүр баян Philosophy and psychology - Философия жана психология Religion - Дин Social sciences - Коомдук илимдер Language and literature - Тил жана адабият Science - Илим Technology - Технология Arts and recreation - Искусство жана эс алуу History and geography - Тарых жана география Навигация менюсу

            Club Baloncesto Breogán Índice Historia | Pavillón | Nome | O Breogán na cultura popular | Xogadores | Adestradores | Presidentes | Palmarés | Historial | Líderes | Notas | Véxase tamén | Menú de navegacióncbbreogan.galCadroGuía oficial da ACB 2009-10, páxina 201Guía oficial ACB 1992, páxina 183. Editorial DB.É de 6.500 espectadores sentados axeitándose á última normativa"Estudiantes Junior, entre as mellores canteiras"o orixinalHemeroteca El Mundo Deportivo, 16 setembro de 1970, páxina 12Historia do BreogánAlfredo Pérez, o último canoneiroHistoria C.B. BreogánHemeroteca de El Mundo DeportivoJimmy Wright, norteamericano do Breogán deixará Lugo por ameazas de morteResultados de Breogán en 1986-87Resultados de Breogán en 1990-91Ficha de Velimir Perasović en acb.comResultados de Breogán en 1994-95Breogán arrasa al Barça. "El Mundo Deportivo", 27 de setembro de 1999, páxina 58CB Breogán - FC BarcelonaA FEB invita a participar nunha nova Liga EuropeaCharlie Bell na prensa estatalMáximos anotadores 2005Tempada 2005-06 : Tódolos Xogadores da Xornada""Non quero pensar nunha man negra, mais pregúntome que está a pasar""o orixinalRaúl López, orgulloso dos xogadores, presume da boa saúde económica do BreogánJulio González confirma que cesa como presidente del BreogánHomenaxe a Lisardo GómezA tempada do rexurdimento celesteEntrevista a Lisardo GómezEl COB dinamita el Pazo para forzar el quinto (69-73)Cafés Candelas, patrocinador del CB Breogán"Suso Lázare, novo presidente do Breogán"o orixinalCafés Candelas Breogán firma el mayor triunfo de la historiaEl Breogán realizará 17 homenajes por su cincuenta aniversario"O Breogán honra ao seu fundador e primeiro presidente"o orixinalMiguel Giao recibiu a homenaxe do PazoHomenaxe aos primeiros gladiadores celestesO home que nos amosa como ver o Breo co corazónTita Franco será homenaxeada polos #50anosdeBreoJulio Vila recibirá unha homenaxe in memoriam polos #50anosdeBreo"O Breogán homenaxeará aos seus aboados máis veteráns"Pechada ovación a «Capi» Sanmartín e Ricardo «Corazón de González»Homenaxe por décadas de informaciónPaco García volve ao Pazo con motivo do 50 aniversario"Resultados y clasificaciones""O Cafés Candelas Breogán, campión da Copa Princesa""O Cafés Candelas Breogán, equipo ACB"C.B. Breogán"Proxecto social"o orixinal"Centros asociados"o orixinalFicha en imdb.comMario Camus trata la recuperación del amor en 'La vieja música', su última película"Páxina web oficial""Club Baloncesto Breogán""C. B. Breogán S.A.D."eehttp://www.fegaba.com

            What should I write in an apology letter, since I have decided not to join a company after accepting an offer letterShould I keep looking after accepting a job offer?What should I do when I've been verbally told I would get an offer letter, but still haven't gotten one after 4 weeks?Do I accept an offer from a company that I am not likely to join?New job hasn't confirmed starting date and I want to give current employer as much notice as possibleHow should I address my manager in my resignation letter?HR delayed background verification, now jobless as resignedNo email communication after accepting a formal written offer. How should I phrase the call?What should I do if after receiving a verbal offer letter I am informed that my written job offer is put on hold due to some internal issues?Should I inform the current employer that I am about to resign within 1-2 weeks since I have signed the offer letter and waiting for visa?What company will do, if I send their offer letter to another company