Skip to content

Commit 2bacc0b

Browse files
authored
Merge pull request #8315 from NuAlex/docs-editor/troubleshoot-permission-issue-1740532452
AB#4161: Update troubleshoot-permission-issue-sync-service-manager.md
2 parents 324c4dd + 8a00244 commit 2bacc0b

1 file changed

Lines changed: 13 additions & 2 deletions

File tree

support/entra/entra-id/user-prov-sync/troubleshoot-permission-issue-sync-service-manager.md

Lines changed: 13 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ To find the on-premises AD connector account, use one of the following tools.
5454

5555
1. In the **Additional tasks** screen, select the **View or export current configuration** task, and then select the **Next** button.
5656

57-
1. In the **Review your solution** screen, locate the **Synchronized Directories** heading, and then copy the `MSOL_<hex-digits>` string from within the **ACCOUNT** field value.
57+
1. In the **Review your solution** screen, locate the **Synchronized Directories** heading, and then copy the string from within the **ACCOUNT** field value. By default, the automatically created account follows the format `DOMAIN\MSOL_<hex-digits>`.
5858

5959
1. Select the **Exit** button.
6060

@@ -87,6 +87,15 @@ Get-ADSyncToolsADconnectorAccount
8787

8888
The output is a table that displays the `Name`, `Forest`, `Domain`, and `Username` columns for each Active Directory connector account. The text string that you want to copy is in the `Username` column.
8989

90+
```console
91+
92+
Name Forest Domain Username
93+
---- ------ ------ --------
94+
corp.contoso.com corp.contoso.com domain.contoso.com MSOL__<hex-digits>
95+
test.local test.local test.local MSOL__<hex-digits>
96+
97+
```
98+
9099
</details>
91100

92101
### Part 2: Determine which attributes the on-premises Active Directory connector account doesn't have permissions for
@@ -109,8 +118,10 @@ The output is a table that displays the `Name`, `Forest`, `Domain`, and `Usernam
109118

110119
1. Identify the Microsoft Entra Connect feature that you're using by following one of these methods:
111120

121+
- When using 'mS-DS-ConsistencyGuid' attribute as the source anchor, the added attribute will be the [mS-DS-ConsistencyGuid](/entra/identity/hybrid/connect/plan-connect-design-concepts#using-ms-ds-consistencyguid-as-sourceanchor) attribute.
122+
112123
- Review the list of [Exchange hybrid writeback](/azure/active-directory/hybrid/connect/reference-connect-sync-attributes-synchronized#exchange-hybrid-writeback) attributes to synchronize, and then return to the **Attribute information** table UI to find the Exchange hybrid writeback attribute that ADSync was trying to add or modify. For example, the added or modified attribute might be the [msDS-ExternalDirectoryObjectID](/openspecs/windows_protocols/ms-ada2/0abc1d06-ac09-476f-a60b-5deb05b394f7) attribute.
113-
124+
114125
- Check the Microsoft Entra Connect features by running the `Get-ADSyncGlobalSettings` cmdlet from a PowerShell session, as shown in the following code:
115126

116127
```azurepowershell

0 commit comments

Comments
 (0)