Azure AD Connect Password SyncCan I use Office365 or Azure AD as master record for Active Directory?Dynamics CRM with Windows Essentials AD + Azure ADSync AD from multiple on-premise server to Office 365The specified module 'MSOnline' was not loaded because no valid module file was found in any module directoryAzure AD Connect ADSync error 0x80230613Password reset not working because password writeback not working in portal.azure.comOffice365 with AD FS Without Azure ADOWA error “OpenIdConnectIdpException”Re-install Azure AD Connect failsHow to edit migration details to Office 365
How do I find and plot the intersection of these three surfaces?
Does the UK have a written constitution?
How come I was asked by a CBP officer why I was in the US when leaving?
Generate and graph the Recamán Sequence
How can I check type T is among parameter pack Ts... in C++?
Signing using digital signatures?
How would a order of Monks that renounce their names communicate effectively?
Dual statement category theory
“Transitive verb” + interrupter+ “object”?
The difference between Rad1 and Rfd1
Why does the A-4 Skyhawk sit nose-up when on ground?
Procedurally generate regions on island
Do 3D printers really reach 50 micron (0.050mm) accuracy?
Confusion about multiple information Sets
Should I hide continue button until tasks are completed?
Zombie Diet, why humans
Professor Roman gives unusual math quiz ahead of
A player is constantly pestering me about rules, what do I do as a DM?
How well known and how commonly used was Huffman coding in 1979?
What speedlites can work with the Canon EOS 4000D's non-standard hotshoe?
Dold-Kan correspondence in the category of symmetric spectra
How to convert object fill in to fine lines?
Why is the Turkish president's surname spelt in Russian as Эрдоган, with г?
How to determine what is the correct level of detail when modelling?
Azure AD Connect Password Sync
Can I use Office365 or Azure AD as master record for Active Directory?Dynamics CRM with Windows Essentials AD + Azure ADSync AD from multiple on-premise server to Office 365The specified module 'MSOnline' was not loaded because no valid module file was found in any module directoryAzure AD Connect ADSync error 0x80230613Password reset not working because password writeback not working in portal.azure.comOffice365 with AD FS Without Azure ADOWA error “OpenIdConnectIdpException”Re-install Azure AD Connect failsHow to edit migration details to Office 365
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
Windows 2012 R2, fully updated/activated
Roles: ADDS, ADFS
Installed Azure AD Connect latest version (only software installed other than updates)
Other applicable services: Office 365 (Business Premium licensing), Azure AD Premium
Having a problem with password writeback. I am able to reset a user password on the local AD and have the changes reflected in Azure AD and Office 365, however when I reset a user password on Office 365, changes are not applied elsewhere.
I am using the built-in Administrator account as the ADMA in this instance and applied the appropriate permissions:
*Reset Password
*Change Password
*Write lockoutTime
*Write pwdLastSet
Azure AD service account being used is set to Global Administrator and Azure AD Connect verifies credentials successfully.
Noteworthy to mention the coveted 31005 event ID has not appeared in the Windows Application event logs since initial deployment of Azure AD Connect.
Event log errors that may be applicable to this issue:
Event ID: 0 Source: Directory Synchronization -- "An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. SetCredential() failed. Contact Technical Support. (0x8009000B)"
Event ID: 109 Source: Directory Synchronization -- "Failure while prefetching import data."
Event ID: 6801 Source: ADSync -- "The extensible extension returned an unsupported error.
The stack trace is:
"Microsoft.Online.Coexistence.ProvisionException: An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. ---> Microsoft.Online.Coexistence.Security.WindowsLiveException: SetCredential() failed. Contact Technical Support.
at Microsoft.Online.Coexistence.Security.LiveIdentityManager.OpenIdentity(String federationProviderId, String userName, String password)
at Microsoft.Online.Coexistence.ProvisionHelper.GetLiveCompactToken(String userName, String userPassword)
--- End of inner exception stack trace ---
at Microsoft.Azure.ActiveDirectory.Connector.GetImportEntriesTask.GetNextBatch()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntriesCore()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntries(GetImportEntriesRunStep getImportEntriesRunStep)
Azure AD Sync 1.0.8667.0"
Event ID: 6803 Source: ADSync -- "The management agent "domain.com - AAD" failed on run profile "Delta Import" because the server encountered errors"
Any help would be great. I'm sure someone will let me know if I left anything necessary out.
windows windows-server-2012 microsoft-office-365 azure-active-directory
asked Sep 22 '15 at 16:49
Brandon WetterBrandon Wetter
1015 bronze badges
add a comment |
Windows 2012 R2, fully updated/activated
Roles: ADDS, ADFS
Installed Azure AD Connect latest version (only software installed other than updates)
Other applicable services: Office 365 (Business Premium licensing), Azure AD Premium
Having a problem with password writeback. I am able to reset a user password on the local AD and have the changes reflected in Azure AD and Office 365, however when I reset a user password on Office 365, changes are not applied elsewhere.
I am using the built-in Administrator account as the ADMA in this instance and applied the appropriate permissions:
*Reset Password
*Change Password
*Write lockoutTime
*Write pwdLastSet
Azure AD service account being used is set to Global Administrator and Azure AD Connect verifies credentials successfully.
Noteworthy to mention the coveted 31005 event ID has not appeared in the Windows Application event logs since initial deployment of Azure AD Connect.
Event log errors that may be applicable to this issue:
Event ID: 0 Source: Directory Synchronization -- "An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. SetCredential() failed. Contact Technical Support. (0x8009000B)"
Event ID: 109 Source: Directory Synchronization -- "Failure while prefetching import data."
Event ID: 6801 Source: ADSync -- "The extensible extension returned an unsupported error.
The stack trace is:
"Microsoft.Online.Coexistence.ProvisionException: An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. ---> Microsoft.Online.Coexistence.Security.WindowsLiveException: SetCredential() failed. Contact Technical Support.
at Microsoft.Online.Coexistence.Security.LiveIdentityManager.OpenIdentity(String federationProviderId, String userName, String password)
at Microsoft.Online.Coexistence.ProvisionHelper.GetLiveCompactToken(String userName, String userPassword)
--- End of inner exception stack trace ---
at Microsoft.Azure.ActiveDirectory.Connector.GetImportEntriesTask.GetNextBatch()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntriesCore()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntries(GetImportEntriesRunStep getImportEntriesRunStep)
Azure AD Sync 1.0.8667.0"
Event ID: 6803 Source: ADSync -- "The management agent "domain.com - AAD" failed on run profile "Delta Import" because the server encountered errors"
Any help would be great. I'm sure someone will let me know if I left anything necessary out.
windows windows-server-2012 microsoft-office-365 azure-active-directory
asked Sep 22 '15 at 16:49
Brandon WetterBrandon Wetter
1015 bronze badges
Ever get this figured out?
– willWorkForCookies
Feb 4 '16 at 0:38
Did you make it work?
– Andres
Aug 23 '16 at 13:45
add a comment |
Windows 2012 R2, fully updated/activated
Roles: ADDS, ADFS
Installed Azure AD Connect latest version (only software installed other than updates)
Other applicable services: Office 365 (Business Premium licensing), Azure AD Premium
Having a problem with password writeback. I am able to reset a user password on the local AD and have the changes reflected in Azure AD and Office 365, however when I reset a user password on Office 365, changes are not applied elsewhere.
I am using the built-in Administrator account as the ADMA in this instance and applied the appropriate permissions:
*Reset Password
*Change Password
*Write lockoutTime
*Write pwdLastSet
Azure AD service account being used is set to Global Administrator and Azure AD Connect verifies credentials successfully.
Noteworthy to mention the coveted 31005 event ID has not appeared in the Windows Application event logs since initial deployment of Azure AD Connect.
Event log errors that may be applicable to this issue:
Event ID: 0 Source: Directory Synchronization -- "An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. SetCredential() failed. Contact Technical Support. (0x8009000B)"
Event ID: 109 Source: Directory Synchronization -- "Failure while prefetching import data."
Event ID: 6801 Source: ADSync -- "The extensible extension returned an unsupported error.
The stack trace is:
"Microsoft.Online.Coexistence.ProvisionException: An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. ---> Microsoft.Online.Coexistence.Security.WindowsLiveException: SetCredential() failed. Contact Technical Support.
at Microsoft.Online.Coexistence.Security.LiveIdentityManager.OpenIdentity(String federationProviderId, String userName, String password)
at Microsoft.Online.Coexistence.ProvisionHelper.GetLiveCompactToken(String userName, String userPassword)
--- End of inner exception stack trace ---
at Microsoft.Azure.ActiveDirectory.Connector.GetImportEntriesTask.GetNextBatch()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntriesCore()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntries(GetImportEntriesRunStep getImportEntriesRunStep)
Azure AD Sync 1.0.8667.0"
Event ID: 6803 Source: ADSync -- "The management agent "domain.com - AAD" failed on run profile "Delta Import" because the server encountered errors"
Any help would be great. I'm sure someone will let me know if I left anything necessary out.
windows windows-server-2012 microsoft-office-365 azure-active-directory
asked Sep 22 '15 at 16:49
Brandon WetterBrandon Wetter
1015 bronze badges
Windows 2012 R2, fully updated/activated
Roles: ADDS, ADFS
Installed Azure AD Connect latest version (only software installed other than updates)
Other applicable services: Office 365 (Business Premium licensing), Azure AD Premium
Having a problem with password writeback. I am able to reset a user password on the local AD and have the changes reflected in Azure AD and Office 365, however when I reset a user password on Office 365, changes are not applied elsewhere.
I am using the built-in Administrator account as the ADMA in this instance and applied the appropriate permissions:
*Reset Password
*Change Password
*Write lockoutTime
*Write pwdLastSet
Azure AD service account being used is set to Global Administrator and Azure AD Connect verifies credentials successfully.
Noteworthy to mention the coveted 31005 event ID has not appeared in the Windows Application event logs since initial deployment of Azure AD Connect.
Event log errors that may be applicable to this issue:
Event ID: 0 Source: Directory Synchronization -- "An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. SetCredential() failed. Contact Technical Support. (0x8009000B)"
Event ID: 109 Source: Directory Synchronization -- "Failure while prefetching import data."
Event ID: 6801 Source: ADSync -- "The extensible extension returned an unsupported error.
The stack trace is:
"Microsoft.Online.Coexistence.ProvisionException: An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. ---> Microsoft.Online.Coexistence.Security.WindowsLiveException: SetCredential() failed. Contact Technical Support.
at Microsoft.Online.Coexistence.Security.LiveIdentityManager.OpenIdentity(String federationProviderId, String userName, String password)
at Microsoft.Online.Coexistence.ProvisionHelper.GetLiveCompactToken(String userName, String userPassword)
--- End of inner exception stack trace ---
at Microsoft.Azure.ActiveDirectory.Connector.GetImportEntriesTask.GetNextBatch()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntriesCore()
at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntries(GetImportEntriesRunStep getImportEntriesRunStep)
Azure AD Sync 1.0.8667.0"
Event ID: 6803 Source: ADSync -- "The management agent "domain.com - AAD" failed on run profile "Delta Import" because the server encountered errors"
Any help would be great. I'm sure someone will let me know if I left anything necessary out.
windows windows-server-2012 microsoft-office-365 azure-active-directory
windows windows-server-2012 microsoft-office-365 azure-active-directory
asked Sep 22 '15 at 16:49
Brandon WetterBrandon Wetter
1015 bronze badges
asked Sep 22 '15 at 16:49
Brandon WetterBrandon Wetter
1015 bronze badges
asked Sep 22 '15 at 16:49
Brandon WetterBrandon Wetter
1015 bronze badges
asked Sep 22 '15 at 16:49
Brandon WetterBrandon Wetter
1015 bronze badges
asked Sep 22 '15 at 16:49
Brandon WetterBrandon Wetter
1015 bronze badges
1015 bronze badges
Ever get this figured out?
– willWorkForCookies
Feb 4 '16 at 0:38
Did you make it work?
– Andres
Aug 23 '16 at 13:45
add a comment |
Ever get this figured out?
– willWorkForCookies
Feb 4 '16 at 0:38
Did you make it work?
– Andres
Aug 23 '16 at 13:45
Ever get this figured out?
– willWorkForCookies
Feb 4 '16 at 0:38
Ever get this figured out?
– willWorkForCookies
Feb 4 '16 at 0:38
Did you make it work?
– Andres
Aug 23 '16 at 13:45
Did you make it work?
– Andres
Aug 23 '16 at 13:45
add a comment |
1 Answer
1
active
oldest
votes
I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.
I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.
answered Oct 3 '15 at 19:22
Jesus ShelbyJesus Shelby
1,1048 silver badges14 bronze badges
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f724068%2fazure-ad-connect-password-sync%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.
I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.
answered Oct 3 '15 at 19:22
Jesus ShelbyJesus Shelby
1,1048 silver badges14 bronze badges
add a comment |
I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.
I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.
answered Oct 3 '15 at 19:22
Jesus ShelbyJesus Shelby
1,1048 silver badges14 bronze badges
add a comment |
I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.
I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.
answered Oct 3 '15 at 19:22
Jesus ShelbyJesus Shelby
1,1048 silver badges14 bronze badges
I'll be honest, I would not spend too much troubleshooting your issue there. I would document your accounts and settings, uninstall and reinstall the latest Azure AD Connect deployment. Make sure you let it uninstall everything (MSOL Sign in assistance, MSOL PowerShell module, etc.) and restart before doing the new install.
I would not use built in accounts. I would either use the express setup and let it create the accounts, or create dedicated sync accounts on both sides (AD, O365). Make sure when you are installing and configuring this your account is a member of the Enterprise Admins group.
answered Oct 3 '15 at 19:22
Jesus ShelbyJesus Shelby
1,1048 silver badges14 bronze badges
answered Oct 3 '15 at 19:22
Jesus ShelbyJesus Shelby
1,1048 silver badges14 bronze badges
answered Oct 3 '15 at 19:22
Jesus ShelbyJesus Shelby
1,1048 silver badges14 bronze badges
answered Oct 3 '15 at 19:22
Jesus ShelbyJesus Shelby
1,1048 silver badges14 bronze badges
1,1048 silver badges14 bronze badges
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f724068%2fazure-ad-connect-password-sync%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Ever get this figured out?
– willWorkForCookies
Feb 4 '16 at 0:38
Did you make it work?
– Andres
Aug 23 '16 at 13:45