Windows Essentials 2016 Dashboard stop password sync with Office365/Azure Active Directory

Question

Hello,

I have already asked my question here

https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_password-mso_o365b/windows-essentials-2016-dashboard-stop-password/965651d4-2e8e-4c5e-a1d4-3cbac13c66a5?messageId=aa135e9e-428f-42e8-a84c-b0ea6a472173

(please read whole current thread there)

and was referred to this forum, as the problem is probably related to Windows Essential Server or Azure AD.

My WSE 2016 has suddenly stopped password synchronisation with Office 365. Office 365 and Azure Active Directory are integrated in the dashboard.

The following behaviour:

In the Dashboard -> Office 365 -> Change Administrator Password is supposedly executed successfully with any password (even the correct one). However, the event viewer shows the error PCNSSVC 6036 - No connection could be established because the target computer refuses the connection. ESSENTIALS_PWD_SYNC_GEOCENTRAL 0x000006BA - The RPC server is not available.

In the dashboard, all data on subscriptions, domains, mailboxes from Exchange Online are listed under Office 365. The distribution groups are visible under Users -> Distribution Groups.

In the Dashboard -> User - > Change User Password results in the error in the file SharedServiceHost-EmailProviderServiceConfig.log

[9312] 210630.172727.0800: PasswordChangeRepository: User name with SID S-1-5-21-34824797-2272319941-1929610800-1129 has been changed from domain\surname.name to surname.name

[12812] 210630.172727.1250: O365ManagementProvider(IO365Callback): ChangePassword:bdcbd278-2186-4296-93-ea520436de starts

[12812] 210630.172727.4123: GraphAdapter: Failed to call Graph service with status code 404 and error: {"error":{"code":"ResourceNotFound","message":"Invalid version: v2","innerError":{"date":"2021-06-30T15:27:27","request-id":"41ad162f-b06b-4dd8-a78d-50bf776c1905","client-request-id":"41ad162f-b06b-4dd8-a78d-50bf776c1905"}}}

[12812] 210630.172727.4123: O365ManagementProvider(IO365Callback): ChangePassword:bdcbd278-2186-4296-93-ea520436de failed due to O365ConfigurationFault = Unexpected

Microsoft.WindowsServerSolutions.O365Integration.O365ConfigureException: Failed to call Graph service with status code 404 and error: {"error":{"code":"ResourceNotFound","message":"Invalid version: v2","innerError":{"date":"2021-06-30T15:27:27","request-id":"41ad162f-b06b-4dd8-a78d-50bf776c1905","client-request-id":"41ad162f-b06b-4dd8-a78d-50bf776c1905"}}}

bei Microsoft.WindowsServerSolutions.O365Integration.GraphAdapter.DefaultHandleGraphServiceError(Int32 statusCode, GraphServiceError error, Int32 retryTimes, Action`2 errorHandler)

bei Microsoft.WindowsServerSolutions.O365Integration.GraphAdapter.<>c__DisplayClass60_1`1.<InvokeWebServiceWithRetry>b__1(Int32 statusCode, GraphServiceError error)

bei Microsoft.WindowsServerSolutions.O365Integration.GraphAdapter.HandleGraphServiceExceptionTResult

bei Microsoft.WindowsServerSolutions.O365Integration.GraphAdapter.InvokeWebServiceWithRetryTResponse

bei Microsoft.WindowsServerSolutions.O365Integration.O365ManagementCore.ChangePassword(String localUserName, String password)

bei Microsoft.WindowsServerSolutions.O365Integration.O365ManagementProvider.<>c__DisplayClass30_0.<ChangePassword>b__0()

bei Microsoft.WindowsServerSolutions.Common.ProviderFramework.ProviderBase1.InvokeOperation[TResult](String operationName, Func1 func)

[12812] 210630.172727.4403: O365Manager: TResult : Boolean, args : Microsoft.WindowsServerSolutions.Common.ProviderFramework.OperationInvokeEventArgs`1[System.Boolean]

[12812] 210630.172727.4413: O365Manager: actualArgs : Microsoft.WindowsServerSolutions.Common.ProviderFramework.OperationInvokeEventArgs`1[System.Boolean]

[9312] 210630.172727.4453: O365ManagerPasswordSyncWrapper: Failed due to OperationInvokeException:Microsoft.WindowsServerSolutions.Common.ProviderFramework.OperationInvokeException: Failed to invoke <ChangePassword>b__0 ---> Microsoft.WindowsServerSolutions.O365Integration.O365ConfigureException: Failed to call Graph service with status code 404 and error: {"error":{"code":"ResourceNotFound","message":"Invalid version: v2","innerError":{"date":"2021-06-30T15:27:27","request-id":"41ad162f-b06b-4dd8-a78d-50bf776c1905","client-request-id":"41ad162f-b06b-4dd8-a78d-50bf776c1905"}}}

bei Microsoft.WindowsServerSolutions.O365Integration.GraphAdapter.DefaultHandleGraphServiceError(Int32 statusCode, GraphServiceError error, Int32 retryTimes, Action`2 errorHandler)

bei Microsoft.WindowsServerSolutions.O365Integration.GraphAdapter.<>c__DisplayClass60_1`1.<InvokeWebServiceWithRetry>b__1(Int32 statusCode, GraphServiceError error)

bei Microsoft.WindowsServerSolutions.O365Integration.GraphAdapter.HandleGraphServiceExceptionTResult

bei Microsoft.WindowsServerSolutions.O365Integration.GraphAdapter.InvokeWebServiceWithRetryTResponse

bei Microsoft.WindowsServerSolutions.O365Integration.O365ManagementCore.ChangePassword(String localUserName, String password)

bei Microsoft.WindowsServerSolutions.O365Integration.O365ManagementProvider.<>c__DisplayClass30_0.<ChangePassword>b__0()

bei Microsoft.WindowsServerSolutions.Common.ProviderFramework.ProviderBase1.InvokeOperation[TResult](String operationName, Func1 func)

--- Ende der internen Ausnahmestapelüberwachung ---

bei Microsoft.WindowsServerSolutions.Common.ProviderFramework.ObjectModelBaseExtended1.SyncWrapper[T](Action1 act)

bei Microsoft.WindowsServerSolutions.O365Integration.O365ManagerPasswordSyncWrapper.<>c__DisplayClass18_0.<ChangePassword>b__0()

bei Microsoft.WindowsServerSolutions.O365Integration.O365ManagerPasswordSyncWrapper.CallWrapperT

[9312] 210630.172727.4493: PasswordSyncManagementCore: Password Sync Configuration Issue: PwdSyncConfigurationFault = LocalProviderIssue

Microsoft.WindowsServerSolutions.PasswordSync.PwdSyncConfigurationException: Failed to invoke <ChangePassword>b__0

bei Microsoft.WindowsServerSolutions.O365Integration.O365ManagerPasswordSyncWrapper.CallWrapperT

bei Microsoft.WindowsServerSolutions.PasswordSync.PasswordSyncManagementCore.SyncPassword(Object state)

[9312] 210630.172727.4503: PasswordSyncManagementCore: Neither O365 nor HES are running

In the dashboard -> Startpage -> status monitoring, a critical error is displayed. "The password for the following accounts cannot be reset by the Windows Server Essentials service ... Listing of accounts.

Solution: Make sure the server is connected to the Internet.

I have not switched to MFA, Server is rebooted, PasswordChangeNotificationService is running.

Any help is appreciated!

Answer 1

Seems to be down again

Answer 2

This is now working. No action required.

Answer 3

We have progress over here: https://learn.microsoft.com/en-us/answers/questions/470385/the-windows-server-essentials-service-cannot-synch.html

Answer 4

I'm going to go out on a limb here and say someone at Microsoft deleted a DNS entry and because they can't be bothered to provide meaningful support anymore a simple issue goes unfixed...

Something I discovered is the client machine with the essentials tray application receives an error message about password sync. When you click it it tries to take you to https://prs-scu.passwordreset.microsoftonline.com/?mkt=EN-US&ru=https://login.microsoftonline.com/login.srf%3flc%3d1033%26mkt%3dEN-US%26lc%3d1033%26id%3d271346%26vv%3d1300&lc=1033 but the website does not load with a DNS Probe error.

I've tried resolving prs-scu.passwordreset.microsoftonline.com on multiple networks with different ISPs and DNS servers as well as a DNS lookup on mxtoolbox and there are no DNS entries.

Lookup details: prs-scu.passwordreset.microsoftonline.com has a canonical name of ssprprod-a-sspr-scu.cloudapp.net which then resolves to 0.0.0.0

Answer 5

Having same issue on 14 servers.....