Month: June 2018

Changes to Azure AD Connect service account

My AAD Connect service account password needed to be changed recently, which caused some issues

.

When changing the password, you need to update the password two places:

  1. Microsoft Azure AD sync service (ADSync)
  2. Synchronization Service

I wasn’t aware of #2, which caused incomplete sync to occur. The symptom was new users from onprem not being added to Azure AD, while existing users and groups we’re not being updated. In addition, my service account got locked out on some occasions, specifically when I forced syncs during troubleshooting.

To remedy the Synchronization Service, do the following:

  1. Open Synchronization Service GUI
  2. Click “Connectors” (top of window)
  3. Right click the connector for your on-prem AD
  4. Select “Connect to Active Directory Forest”
  5. Type in updated user information (typically just an updated password)

You can test the sync by running the Powershell command:

This will run a delta sync of your on-prem AD objects to AAD.