You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/entra/entra-id/user-prov-sync/troubleshoot-pwd-sync.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -67,7 +67,7 @@ To resolve this issue, re-enable directory synchronization and password synchron
67
67
68
68
### Scenario 6: Users can't sign in by using their password
69
69
70
-
In this scenario, the password hash doesn't successfully sync to Microsoft Entra ID. If the user account was created in on-premsises Active Directory running on a version of Windows Server earlier than Windows Server 2003, the account doesn't have a password hash.
70
+
In this scenario, the password hash doesn't successfully sync to Microsoft Entra ID. If the user account was created in on-premises AD DS on a version of Windows Server earlier than Windows Server 2003, the account doesn't have a password hash.
71
71
72
72
## Directory synchronization is running but passwords of all users aren't synced
73
73
@@ -110,29 +110,29 @@ The following tables list event ID messages in the Application log that are rela
110
110
| 651|Provision credentials batch end. Count: 1|Password synchronization finishes retrieving updated passwords from the on-premises AD DS.|
111
111
| 653|Provision credentials ping start.|Password synchronization starts informing Microsoft Entra ID that there are no passwords to be synced. It occurs every 30 minutes if no passwords have been updated in the on-premises AD DS.|
112
112
| 654|Provision credentials ping end.|Password synchronization finishes informing Microsoft Entra ID that there are no passwords to be synced. It occurs every 30 minutes if no passwords were updated in the on-premises AD DS.|
113
-
| 656|Password Change Request - Anchor: H552hI9GwEykZwosf74JeOQ==, Dn: CN=Viola Hanson,OU=Cloud Objects,DC=contoso,DC=local, Change Date: 05/01/2013 16:34:08|Password synchronization indicates that a password change was detected and tries to sync it to Microsoft Entra ID. It identifies the user or users whose password changed and will be synced. Each batch contains at least one user and at most 50 users.|
| 656|Password Change Request - Anchor: H552hI9GwEykZwosf74JeOQ==, Dn: CN=Viola Hanson,OU=Cloud Objects,DC=contoso,DC=local, Change Date: 05/01/2013 16:34:08|Password synchronization indicates that a password change was detected and tries to sync it to Microsoft Entra ID. It identifies the user or users whose password changed and will be synced. Each batch contains at least one user and at most 50 users.|
| 0|The following password changes failed to synchronized and have scheduled for retry.<br/><br/>DN = CN=Eli McLean,OU=Cloud Objects,DC=contoso,DC=local|User or users whose password wasn't synced|[Configure directory synchronization](/azure/active-directory/hybrid/whatis-hybrid-identity#bkmk_configuretool) <br/><br/>[One or more objects don't sync when using the Azure Active Directory Sync tool](objects-dont-sync-ad-sync-tool.md)|
122
122
| 115|Access to Windows Azure Active Directory has been denied. Contact Technical Support.|Microsoft Entra credentials were updated through Forefront Identity Manager (FIM).|Run the Microsoft Entra Configuration Wizard again. See [Password hash synchronization stops working after you update Microsoft Entra credentials in FIM](pwd-hash-sync-stop-work-fim.md)|
123
-
| 657|Password Change Result - Anchor: B0H+OD3LM0GEnYODwdPhpg==, Result: failed, Extended Error:|User or users whose password wasn't synced|[Configure directory synchronization](/azure/active-directory/hybrid/whatis-hybrid-identity#bkmk_configuretool) <br/><br/>[One or more objects don't sync when using the Azure Active Directory Sync tool](objects-dont-sync-ad-sync-tool.md)|
123
+
| 657|Password Change Result - Anchor: B0H+OD3LM0GEnYODwdPhpg==, Result: failed, Extended Error:|User or users whose password wasn't synced|[Configure directory synchronization](/azure/active-directory/hybrid/whatis-hybrid-identity#bkmk_configuretool) <br/><br/>[One or more objects don't sync when using the Azure Active Directory Sync tool](objects-dont-sync-ad-sync-tool.md)|
124
124
125
125
### Error (action required)
126
126
127
127
|Event ID|Description|Cause|More information|
128
128
|---------|---------|---------|---------|
129
129
|0|The user name or password is incorrect. Verify your user name, and then type your password again.|Microsoft Entra credentials were updated through Forefront Identity Manager (FIM).|Run the Microsoft Entra Configuration Wizard again. See [Password hash synchronization stops working after you update Microsoft Entra credentials in FIM](pwd-hash-sync-stop-work-fim.md)|
130
-
|611|Password synchronization failed for domain: `Contoso.com`.<br/><br/>Microsoft.Online.PasswordSynchronization.SynchronizationManagerException: Recovery task failed. ---> Microsoft.Online.PasswordSynchronization.DirectoryReplicationServices.DrsException: RPC Error 8439: The distinguished name specified for this replication operation is invalid. There was an error calling _IDL_DRSGetNCChanges.|Windows Server 2003 domain controllers handle certain scenarios unexpectedly.|[Password hash synchronization for Microsoft Entra ID stops working and Event ID 611 is logged](pwd-hash-sync-stops-work.md)|
131
-
|611|Password synchronization failed for domain: `Contoso.com`.<br/><br/>Microsoft.Online.PasswordSynchronization.DirectoryReplicationServices.DrsException: RPC Error 8593: The directory service cannot perform the requested operation because the servers involved are of different replication epochs (which is usually related to a domain rename that is in progress).|It was a known issue that was fixed in Azure Active Directory Sync tool build 1.0.6455.0807.|To resolve this issue, update to latest version of the Azure Active Directory Sync tool.|
130
+
|611|Password synchronization failed for domain: `Contoso.com`.<br/><br/>Microsoft.Online.PasswordSynchronization.SynchronizationManagerException: Recovery task failed. ---> Microsoft.Online.PasswordSynchronization.DirectoryReplicationServices.DrsException: RPC Error 8439: The distinguished name specified for this replication operation is invalid. There was an error calling _IDL_DRSGetNCChanges.|Windows Server 2003 domain controllers handle certain scenarios unexpectedly.|[Password hash synchronization for Microsoft Entra ID stops working and Event ID 611 is logged](pwd-hash-sync-stops-work.md)|
131
+
|611|Password synchronization failed for domain: `Contoso.com`.<br/><br/>Microsoft.Online.PasswordSynchronization.DirectoryReplicationServices.DrsException: RPC Error 8593: The directory service cannot perform the requested operation because the servers involved are of different replication epochs (which is usually related to a domain rename that is in progress).|It was a known issue that was fixed in Azure Active Directory Sync tool build 1.0.6455.0807.|To resolve this issue, update to latest version of the Azure Active Directory Sync tool.|
132
132
|611|Password synchronization failed for domain: `Contoso.com`<br/><br/>System.ArgumentOutOfRangeException: Not a valid Win32|It was a known issue that was fixed in Azure Active Directory Sync tool build 1.0.6455.0807.|To resolve this issue, update to latest version of the Azure Active Directory Sync tool.|
133
133
|611|Password synchronization failed for domain: `Contoso.com`.<br/><br/>System.ArgumentException: An item with the same key has already been added.|It was a known issue that was fixed in Azure Active Directory Sync tool build 1.0.6455.0807.|To resolve this issue, update to latest version of the Azure Active Directory Sync tool.|
134
134
|652|Failed credential provisioning batch. Error: Microsoft.Online.Coexistence.ProvisionException: An error occurred. Error Code: 90. Error Description: Password Synchronization has not been activated for this company. Tracking ID: 07e93e8a-cf2d-4f67-9e95-53169c4875e0 Server Name: BL2GR1BBA003. ---> System.ServiceModel.FaultException1[Microsoft.Online.Coexistence.Schema.AdminWebServiceFault]: Password Synchronization has not been activated for this company. (Fault Detail is equal to Microsoft.Online.Coexistence.Schema.AdminWebServiceFault).|Password synchronization failed when retrieving updated passwords from the on-premises AD DS.|[Configure directory synchronization](/azure/active-directory/hybrid/whatis-hybrid-identity#bkmk_configuretool) <br/><br/>[One or more objects don't sync when using the Azure Active Directory Sync tool](objects-dont-sync-ad-sync-tool.md)|
135
-
|652|Failed credential provisioning batch. Error: Microsoft.Online.Coexistence. ProvisionRetryException: An error occurred. Error Code: 81. Error Description: Windows Azure Active Directory is currently busy. This operation will be retried automatically.|It was a known issue that was fixed in Azure Active Directory Sync tool build 1.0.6455.0807|To resolve this issue, update to latest version of the Azure Active Directory Sync tool.|
135
+
|652|Failed credential provisioning batch. Error: Microsoft.Online.Coexistence. ProvisionRetryException: An error occurred. Error Code: 81. Error Description: Windows Azure Active Directory is currently busy. This operation will be retried automatically.|It was a known issue that was fixed in Azure Active Directory Sync tool build 1.0.6455.0807|To resolve this issue, update to latest version of the Azure Active Directory Sync tool.|
136
136
|655|Failed credential provisioning ping. Error: Microsoft.Online.Coexistence.ProvisionException: An error occurred. Error Code: 90. Error Description: Password Synchronization has not been activated for this company. Tracking ID: 0744fa31-1d9b-453a-83d8-c2555d843802 Server Name: BL2GR1BBA005. ---> System.ServiceModel.FaultException1[Microsoft.Online.Coexistence.Schema.AdminWebServiceFault]: Password Synchronization has not been activated for this company. (Fault Detail is equal to Microsoft.Online.Coexistence.Schema.AdminWebServiceFault).|Password synchronization failed to inform Microsoft Entra ID that there are no passwords to be synced. It occurs every 30 minutes.|[Configure directory synchronization](/azure/active-directory/hybrid/whatis-hybrid-identity#bkmk_configuretool) <br/><br/>[One or more objects don't sync when using Azure Active Directory Sync tool](objects-dont-sync-ad-sync-tool.md)|
137
137
|655|The user name or password is incorrect. Verify your user name, and then type your password again.|Microsoft Entra credentials were updated through FIM.|Run the Microsoft Entra Configuration Wizard again. See the following Microsoft Knowledge Base article: [Password hash synchronization stops working after updating Microsoft Entra credentials in FIM](pwd-hash-sync-stop-work-fim.md)|
138
138
|6900|The server encountered an unexpected error while processing a password change notification:<br/><br/>"The user name or password is incorrect. Verify your user name, and then type your password again.|Microsoft Entra credentials were updated through FIM.|Run the Microsoft Entra Configuration Wizard again. See the following Microsoft Knowledge Base article: [Password hash synchronization stops working after updating Microsoft Entra credentials in FIM](pwd-hash-sync-stop-work-fim.md)|
0 commit comments