Unable to update the specified properties for on-premises mastered Directory Sync objects

Question

Environment:
Hybrid with an older Exchange 2010 server.
AD server 2019 running AZURE AD CONNECT (latest version as of March 2022)
I've been adding new employees by creating a new account in AD and syncing with AZURE. No problems there.
Then I go into the Office 365 portal and assign Office for business licenses. A mailbox is then created and working no problem.
Recently, when using the Exchange Admin online, trying to add an alias to ANY mailbox or simply changing the REPLY to SMTP address, I am getting the error:
Error executing request. An Azure Active Directory call was made to keep object in sync between Azure Active Directory and Exchange Online. However, it failed. Detailed error message: Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration. DualWrite (Graph) The issue may be transient and please retry a couple of minutes later. If issue persists, please see exception members for more information.
This was uncovered when a user sent me an email and it came the onmicrosoft.com domain instead of the company domain. When I looked at the account, I tried to change the REPLY TO back to the default company email and got the error also.
Only 3 employees are effected by the "onmicrosoft.com" issue but I cannot add an alias email to ANY mailbox or change the primary email.
About 2/3 of the employees were migrated from the on premise Exchange server about a year ago and the rest created as mentioned above.
Checking the AD CONNECT LOGS, there are no errors at all when syncing and the online dashboards show no sync errors.
I then tried going into the users AD Properties on Premise and changed the PROXY ADDRESS ATTRIBUTE to change the default reply to SMPT:user@keyman .com. That syncs no problem and shows up in the portal as the primary address but when the user sends an email, it still comes from the onmicrosoft.com domain. I'm at a loss without any log errors to point me in the right direction. The syncing from on premise to online seems to be working fine otherwise.
Thank you

Answer 1

If you are syncing with AADConnect to On-prem, you can not manage any of the mailboxes in 365 that have their AD accounts created on-prem, so what you are seeing is expected.
Essentially you would create a remote mailbox and it syncs and gets created in 365 once a license is applied
You would only be able to modify mailboxes in 365 that had both the user account and mailbox created there.

If you were able to modify mailboxes before directly in 365 that were being synced, I cant explain that because thats really not how it works :)

Answer 2

Can you make the change in Exchange instead? If there isnt a remote maibox created for these users, thats what you need to do first, then change the primary within Exchange on-prem so it syncs

or use on-prem Exchange Powershell and let it sync

Enable-RemoteMailbox "Kim Akers" -RemoteRoutingAddress "kima@contoso.mail.onmicrosoft.com" -PrimarySmtpAddress user@domain.com  

https://learn.microsoft.com/en-us/powershell/module/exchange/enable-remotemailbox?view=exchange-ps

Answer 3

Hello Community,

Just to comment that I've found the same behavior described on this thread. We do not have an On-Prem Exchange, we have been using AD Connect for about 4 years synching with AAD, when users get created on Azure AD side, we assign an O365 license in order for their mailbox to be ceated and we have been able to add alias or modify "Primary SMTP Address" since a few days ago. This week we also noticed a user sending email from "@keyman .onmicrosoft.com", so we tried to update the "Primary SMTP Address" with no success and the message:

Error executing request. An Azure Active Directory call was made to keep object in sync between Azure Active Directory and Exchange Online. However, it failed. Detailed error message: Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration. DualWrite (Graph) The issue may be transient and please retry a couple of minutes later. If issue persists, please see exception members for more information.

Checking our Active Directory, we did noticed that attribute "ProxyAddress" is BLANK so I'dont know if it supposed to be populated with Azure AD values coming from the cloud.

Regards.,

Enrique

Answer 4

Dual Write Back Error using AD connect for SMTP Proxy addresses

 

The problem is most of you have forgot to add the smtp: or SMTP: infront of the email address

 

to fix pls open AD onprem

 

I not done so already make sure Advanced Features is enabled

"View" from the file menu > "Advanced Features"

 

Find the user > right click Properties > Attribute Editor 

 

Search for "proxyAddresses" in the list > "Edit" add examples:

SMTP:DefaultReplyEmailaddress@domain.com

smtp:aliasaddress1@domain.com

smtp:aliasaddress2@domain.com

smtp:aliasaddress2@domain.com

 

 

a new customer of ours had the same issue for many years and this was an easy fix

 

Answer 5

I am getting the same error when we modify smtp addresses. In our environment, we had all mailboxes in an older Exchange 2010. We use AAD to sync user info on Azure. I created mailboxes on Exchange Online and now, users have an exchange online mailbox. All end clients are connected to Exchange Online. All mails are received at Exchange Online. But, the SMTP address info comes from onprem AD. How do I properly disconnect the on-prem mailboxes.