ADSync -- MSOL_xxxxxx | Change password and apply AD Password Policy

Question

Hello,

We have a new security policy for all accounts with "Password not set to expiry" to be reviewed and setting removed.

I came across the MSOL_xxxx account.

Can I reset the password as per our security policy recommendation (30 x char) and can I apply an AD Password Policy to expire the password in 365 days?

Wonder if this will cause any issues on ADSync...

Thanks!

Answer 1

Hi @SenhorDolas

Thank you for reaching us!

The MSOL account is created with a long, complex password that doesn't expire. If you have a password policy in your domain, make sure that long and complex passwords are allowed for this account.

For more details please refer: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/reference-connect-accounts-permissions#created-accounts-details
Hope this helps. Do let us know if you any further queries.

Thanks,

Akhilesh.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.