How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (2023)

Exchange Online More...Less

Summary

This article describes how toidentify directory synchronization (DirSync) or Azure Active Directory (Azure AD) Connect provisioning errors in Microsoft Office 365.

More Information

You can check the status in the Microsoft 365 admin center. If there are no errors present, the DirSyncor Azure ADConnect Status icon appearsas a green circle (successful).

How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (1)

If errors are present, the DirSync or Azure ADConnectStatus icon appears as an orange triangle, and the entry includes a "We found DirSync object errors"message link that points tomore information.

How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (2)

After you click We found DirSync object errors, all errors that exist in the environment are listed.

How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (3)

Click each error entry for more information.

In the following example, a proxy address that belongs to Mia.Pugliesi@contoso.com is added as a proxy address to another user, lbudai@contoso.com.

This examplestates that the Mia.Pugliesi@contoso.com proxy address is removed automatically. This removal means that the Dirsyncor Azure ADConnect process doesn'tlet thechange of proxy addresses be synced toAzure and Exchange. However, the source Active Directory Domain Services (AD DS) that must be corrected to make the object healthy is not changed. If the proxy address is not changed in the source AD DS, the error persists, as shown in the following screen shot.

(Video) How to sync users in Azure AD Connect | Sync users and groups from on-premise to Azure AD

How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (4)

Unless this error is for a new user who was not provisioned, existing objects may not be affected by this issue. However, this error may affect your ability to do other thingswiththe object. For example, if you try to changelicensing, you see the following error message.

How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (5)

You can also view this error by using the following cmdlet in Azure AD PowerShell:

Get-MsolDirSyncProvisioningError -ErrorCategory PropertyConflict

This example indicates only which object has an issue. It does not include the conflicting object. The results may vary, depending on the error.For example, the result resembles the following:

ExtensionData : System.Runtime.Serialization.ExtensionDataObjectDisplayName : Liza BudaiImmutableId : ImmutableIdLastDirSyncTime : Date/TimeObjectId : ObjectIdObjectType : UserProvisioningErrors : {ProxyAddresses}ProxyAddresses : {smtp:lbudai@contoso.com, smtp:lbudai@contoso.mail.onmicrosoft.com}UserPrincipalName : lbudai@contoso.com

Additionally, a report is sent to the technical tenant contact with similar information when an error occurs. The reportresembles the following screen shot.If you need to update the email address of the person who recieives this notification, you can edit it by giong to the M365 Admin Center -> Settings -> Organization profile.

If you need to add multiple people, consider using a distribution list or setting up an inbox or transport rule to forward to a set of users or distribution list to widen the audience.

How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (6)

Review the object in the source AD DS, and take the necessary action to resolve the issue. In this case, you can see that the duplicate proxy address is added to Liza’s account. Thisis clearly a mistake, and the duplicate proxy address can be removed.

How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (7)

(Video) 5- Azure AD Connect Sync : Duplicate Identities troubleshooting Scenario-1 : IT Admin Series

The errormay not always be so clear. These kinds of errors can be triggered by your business processes that may include employees leaving and returning, name changes, mergers and acquisitions, and so on. In these cases, the duplicate objects appear to be valid. However, you should do a detailed review to locate and resolve the difference. Microsoft does not have access to your AD DS source. Therefore, your assistance will be necessary to resolve the issue.

Reference

For more information, seethe following Office and Azure articles:

Need more help?

Want more options?

Discover Community

(Video) Examining Sync Errors in Azure AD Connect

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (11)

Accessibility center

(Video) How to troubleshoot Azure AD Connect | Identity | Microsoft

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

How to identify DirSync or Azure AD Connect provisioning errors in Office 365 (14)

Windows Insiders

(Video) 1-Resolving duplicate identities issues with Office 365 and Azure AD Connect (Soft \ Hard Matching)

Videos

1. What is Soft Match and Hard Match in Azure AD Connect | How to Soft Match and Hard Match
(Office 365 Concepts)
2. Configure Azure AD to Provision Servicenow accounts
(ScooterTheTroubleshooter)
3. Troubleshoot Duplicate error (Proxy address) in Azure AD Connect during synchronization
(Microsoft Helps)
4. Troubleshoot Permissions issues (enable inheritance) in Azure AD Connect during synchronization
(Microsoft Helps)
5. MVPDays - Configure Azure AD Connect like the Pros - Max Fritz
(MVPDays)
6. Fixing Hybrid-User Sync Issues with Azure AD Connect
(SecureCRC)
Top Articles
Latest Posts
Article information

Author: Laurine Ryan

Last Updated: 02/24/2023

Views: 6138

Rating: 4.7 / 5 (77 voted)

Reviews: 92% of readers found this page helpful

Author information

Name: Laurine Ryan

Birthday: 1994-12-23

Address: Suite 751 871 Lissette Throughway, West Kittie, NH 41603

Phone: +2366831109631

Job: Sales Producer

Hobby: Creative writing, Motor sports, Do it yourself, Skateboarding, Coffee roasting, Calligraphy, Stand-up comedy

Introduction: My name is Laurine Ryan, I am a adorable, fair, graceful, spotless, gorgeous, homely, cooperative person who loves writing and wants to share my knowledge and understanding with you.