Fix Synchronization Issues with Azure AD Connect | Troubleshooting Guide

Fix Synchronization Issues

Question

You have an Active Directory forest named contoso.com.

You install and configure Azure AD Connect to use password hash synchronization as the single sign-on(SSO) method. Staging mode is enabled.

You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.

You need to ensure that the synchronization completes successfully.

What should you do?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D

In staging mode, the server is active for import and synchronization, but it does not run any exports. A server in staging mode is not running password sync or password writeback, even if you selected these features during installation. When you disable staging mode, the server starts exporting, enables password sync, and enables password writeback.

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-staging-server https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-operations

The scenario described in the question involves an Active Directory forest named contoso.com and Azure AD Connect, which is used to synchronize user accounts and passwords between on-premises Active Directory and Azure Active Directory. The synchronization method in use is password hash synchronization, which allows users to use the same password to sign in to both on-premises and cloud resources.

The issue reported in the question is that the Synchronization Service Manager does not display any sync jobs, indicating that synchronization is not occurring as expected. To address this issue, we need to identify the root cause and take appropriate actions.

Option A: From Azure PowerShell, run Start-AdSyncSyncCycle -PolicyType Initial.

This option suggests running a PowerShell command to initiate a synchronization cycle with a specific policy type of "Initial." This option may be useful if there are specific configuration settings that need to be applied during the synchronization cycle.

Option B: Run Azure AD Connect and set the SSO method to Pass-through Authentication.

This option suggests changing the SSO method from password hash synchronization to pass-through authentication. Pass-through authentication is another SSO method that allows users to use their on-premises credentials to sign in to cloud resources without the need to synchronize passwords to Azure AD. This option may be useful if password hash synchronization is not working as expected.

Option C: From Synchronization Service Manager, run a full import.

This option suggests running a full import using the Synchronization Service Manager. A full import would import all objects from the on-premises Active Directory into Azure AD. This option may be useful if there are changes in the on-premises Active Directory that have not been synchronized to Azure AD.

Option D: Run Azure AD Connect and disable staging mode.

This option suggests disabling staging mode in Azure AD Connect. Staging mode is a feature that allows synchronization to occur in a staging environment before changes are committed to the production environment. This option may be useful if staging mode is causing issues with synchronization.

Based on the information provided in the scenario, Option C is the most appropriate solution. Running a full import from the Synchronization Service Manager would ensure that all changes in the on-premises Active Directory are synchronized to Azure AD. However, if this solution does not work, other options may need to be considered.