This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 94%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EE%3C/text%3E%3C/svg%3E)
After reinstalling the Azure AD Connect Sync and provisioning agent on an existing environment, the error:
Password hash sync
Status: NotRun
Last successful run: Never
Job Id :AD2AADPasswordHash.9e6de611bd014d65b1ba299e550a6ae8.c4599863-b31a-4327-bcfb-12430ddd6065
Keeps showing non stop. all services are Up and running on the on premise DC, Agent is healthy, FW rules are as set in documentation but releasing the Password hash sync error from "provisioning quarantine" into Healthy state only last 1 minute.
A ticket with Microsoft is already in place but after 3 days no answers. thoughts?
DC is a Win 2022 Server (Azure VM)
Azure AD Sync Agent is 2.3.8
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 96%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFA%3C/text%3E%3C/svg%3E)
Hi @EcoInC
Thanks for reaching out to Microsoft Q&A.
Are you experiencing any issues to sync users or only with the passwords? Do you know if the Password Sync is failing for all the users?
Please, run the AD Connect Troubleshooter (if you haven't yet) and select the password sync option and share the results in here
Thanks,
Fabio
Hi Fabio, Thanks a lot for taking time to answers, Support has not reach out to me yet.
I've attached the results and it seems to be all OK, nevertheless, after i remove the Cloud config from quarantine, it shows OK for a few seconds and it goes back to quarantine with the same error
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 83%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENJ%3C/text%3E%3C/svg%3E)
Hi EcoInC,
Thank you for posting in the Q&A Forums.
Check the status of the Azure AD Connect synchronization service:
On the local server, open Services and see if the Azure AD Connect synchronization service (usually Microsoft Azure AD Sync) is running.
Check the agent status:
If you are using a Provisioning Agent, make sure it is running and there are no errors. You can view the status and logs of the agent in the Azure Portal.
View the synchronization logs:
Open Azure AD Connect, go to the Troubleshooting tab, and use the Synchronization Service Manager to view detailed error logs. This may provide clues as to why the PHS is not running.
Check network connectivity:
Ensure that the Azure AD Connect synchronization server has access to the endpoints and URLs required for Azure AD.You can verify network connectivity using the Azure AD Connect Health agent or a manual test.
Check firewall and proxy settings:
If you have firewalls or outbound proxies in your environment, make sure that they are not blocking the Azure AD Connect synchronization server from communicating with Azure AD.
Check the Azure AD Connect configuration:
Rerun the configuration in the Azure AD Connect wizard to ensure that all settings are correct, especially those related to PHS.
Best regards
NeuviJ
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Hi NeuviJ,
Check the status of the Azure AD Connect synchronization service:
All services are running OK:
Check the agent status:
But the only log that shows a failure give this info:
Activity
Date7/3/2024, 9:35 AM
Activity TypeQuarantine
Correlation IDce074056-0b0c-4983-86f0-861bef578bb5
CategoryProvisioningManagement: Statusfailure
Status reason: This run profile is being quarantined because of: EncounteredQuarantineException; Error: Password hash computation failed in the provisioning agent. Additional Error Details:
User Agent
Initiated by (actor)
TypeApplication
Display NameAzure AD Cloud Sync
App ID
Service principal ID
Service principal name
Additional Details
Details
ErrorCodeHybridSynchronizationPasswordHashComputationFailed
EventNameQuarantine
ipaddr
JoiningProperty
oid
SourceAnchor
TargetAnchor
tid
wids
View the synchronization logs:
Can not see a particular error message that can give clues on why is failing.
The network and firewall were already checked and allowing URL and Ports as Microsoft states in their documentation. as I said, it was working fine before and after a failure in the server we needed to reinstall. so everything was already set and we just added some new URLs we didn't have but this didn't change anything.
Hi @EcoInC
I'm sorry it took so long for us to answer you, and thanks for sharing the screenshots.
I was checking the first image, it looks like it refers to Cloud Sync feature, and not the Entra Connect. Perhaps are you using both and testing Cloud Sync feature at this moment and considering replacing Entra Connect in the future?
Thanks,
Fabio
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 20%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDL%3C/text%3E%3C/svg%3E)
Hi, Anyone with any ideas on what to do,?