You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/entra/entra-id/user-prov-sync/troubleshoot-permission-issue-sync-service-manager.md
+13-2Lines changed: 13 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -54,7 +54,7 @@ To find the on-premises AD connector account, use one of the following tools.
54
54
55
55
1. In the **Additional tasks** screen, select the **View or export current configuration** task, and then select the **Next** button.
56
56
57
-
1. In the **Review your solution** screen, locate the **Synchronized Directories** heading, and then copy the `MSOL_<hex-digits>`string from within the **ACCOUNT** field value.
57
+
1. In the **Review your solution** screen, locate the **Synchronized Directories** heading, and then copy the string from within the **ACCOUNT** field value. By default, the automatically created account follows the format `DOMAIN\MSOL_<hex-digits>`.
The output is a table that displays the `Name`, `Forest`, `Domain`, and `Username` columns for each Active Directory connector account. The text string that you want to copy is in the `Username` column.
### Part 2: Determine which attributes the on-premises Active Directory connector account doesn't have permissions for
@@ -109,8 +118,10 @@ The output is a table that displays the `Name`, `Forest`, `Domain`, and `Usernam
109
118
110
119
1. Identify the Microsoft Entra Connect feature that you're using by following one of these methods:
111
120
121
+
- When using 'mS-DS-ConsistencyGuid' attribute as the source anchor, the added attribute will be the [mS-DS-ConsistencyGuid](/entra/identity/hybrid/connect/plan-connect-design-concepts#using-ms-ds-consistencyguid-as-sourceanchor) attribute.
122
+
112
123
- Review the list of [Exchange hybrid writeback](/azure/active-directory/hybrid/connect/reference-connect-sync-attributes-synchronized#exchange-hybrid-writeback) attributes to synchronize, and then return to the **Attribute information** table UI to find the Exchange hybrid writeback attribute that ADSync was trying to add or modify. For example, the added or modified attribute might be the [msDS-ExternalDirectoryObjectID](/openspecs/windows_protocols/ms-ada2/0abc1d06-ac09-476f-a60b-5deb05b394f7) attribute.
113
-
124
+
114
125
- Check the Microsoft Entra Connect features by running the `Get-ADSyncGlobalSettings` cmdlet from a PowerShell session, as shown in the following code:
0 commit comments