dn-attributes-failure AD Sync Error

taiwocoker 21 Reputation points
2019-12-05T15:34:59.547+00:00

I have a synced security group with the error above when i check azure ad sync connect error. I've checked all its properties and can't seem to find where the problem is. It all looks correct. No additional information is provided on the error page. I noticed in ad sync error is showing in synchronization service manager also.

I've spent hours on this and cant figure out why its not syncing properly. Any help with be appreciated

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,094 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David 701 Reputation points
    2019-12-09T19:01:30.367+00:00

    Is there an invalid proxy address on this group or perhaps a disabled account or account that wont sync thats a group member?

    2 people found this answer helpful.

3 additional answers

Sort by: Most helpful
  1. Lukas Beran 176 Reputation points
    2019-12-05T20:14:11.193+00:00

    Hi @Taiwocoker

    Do you have the latest version of Azure AD Connect? https://www.microsoft.com/en-us/download/details.aspx?id=47594 As of today it is 1.4.32.0.

    Check the attributes if there are not typos - I have seen double @, multiple dots etc.

    Also you can try this solution https://community.spiceworks.com/topic/2153379-dn-attributes-failure-on-aad-sync-service

    0 comments No comments

  2. taiwocoker 21 Reputation points
    2019-12-09T11:34:25.443+00:00

    Hi @Lukas Beran

    Its running on the latest ADConnect version. In my case, none of the groups have a manager and they all synced successfully to Azure AD. I've tried adding a manager but that did not seem to help at all. I've checked the attribute but nothing out of the ordinary that i think is incorrect

    0 comments No comments

  3. taiwocoker 21 Reputation points
    2019-12-10T09:42:15.483+00:00

    @AndyDavidMVP Unsynced disabled account was the issue. Thanks