Separate passwords required for the computer and work or school account when using password synchronization and the Azure Active Directory sync tool

Original product version:   Cloud Services (Web roles/Worker roles), Azure Active Directory, Microsoft Intune, Azure Backup, Office 365 Identity Management
Original KB number:   2853316


Users have to use different passwords to sign in to their work or school account in a Microsoft cloud service such as Office 365, Microsoft Azure, or Microsoft Intune and to log on to their computers. This problem occurs even though you've take the following actions:

  • Enabled password synchronization in Azure Active Directory (Azure AD)
  • Set up Active Directory synchronization to sync user accounts in your on-premises Active Directory Domain Services (AD DS) environment to Azure AD


This problem occurs if users' cloud service passwords change. Password synchronization doesn't sync the cloud service password. Therefore, users in this scenario have different passwords for their local computer and for the cloud service.


To resolve this problem, do one of the following:

  • Have users change their computer password.
  • Reset the computer password for the users. When you reset a user's password, make sure that the User must change password at next logon check box is cleared.

After directory synchronization occurs, users' computer passwords in the on-premises Active Directory environment are synced to Azure AD. Users can then log on to their computers and sign in to the cloud service by using the same password.

Contact us for help

If you have questions or need help, create a support request, or ask Azure community support. You can also submit product feedback to Azure community support.