Has anyone experienced this issue? I support IT an agency with approximately 150 employees and about 100 workstations plus mobile devices on a Windows Active Directory network. I am currently on Day 3 of a "Severity A" Microsoft Azure support ticket in which passwords on accounts in our hybrid environment cannot be reset if they are locked out or expire. Our network is slowly becoming disabled as email accounts are locked out and become inaccessible as well as log in access to our company SharePoint Site. Our original AD Connect V1.5 installed on a 2012R2 server (which was configured for one way sync up to Azure) was depreciated and stopped working last week. Exported a configuration file from the orginal AD connect 1.5 and used it to install the latest version V2.2 on another Server 2019 Domain controller. A few initial issues with syncing were resolved. The AD Connect sync service manager shows the service is syncing successfully in all phases both with local domain and Azure service. No errors in the on-Premises Domain Controller event viewer Azure Portal Admin Dash show service to be healthy . New AD accounts created on Premise sync quickly to Azure and appear available in the active users list and are available to have license and email assigned to them. .. but cannot access the account ( ie log into 365 or the Azure Portal, etc.) with the password assigned when the account was created. Reset the password, using forgot my password indicate the password is reset successfully as well as get a notification in the Admin email that the password was reset successfully for the account, BUT THE PASSWORD DOES NOT WORK! Microsoft Azure Support has been working on this issue since Wednesday of this week. Its been a rollercoaster. An Azure Engineer will work on the issue for a couple of hours then his shift ends up saying he is transferring the ticket to another Engineer and then nothing for 10, 12 hours. Of course, no phone number to call only email. I write a request to the ticket every hour for an update to try to get a response. On Premise Passwords change still work for on Premise resources (logging into workstations, directory rights etc. Azure Support Tech is looking at the back-end now Has anyone seen an issue like this? I am thinking reaching out to third party help as this has become critical. any recommendations?

I am currently on Day 3 of a "Severity A" Microsoft Azure support ticket with Authentication issues

CowJazz 40

Has anyone experienced this issue?

I support IT an agency with approximately 150 employees and about 100 workstations plus mobile devices on a Windows Active Directory network.

I am currently on Day 3 of a "Severity A" Microsoft Azure support ticket in which passwords on accounts in our hybrid environment cannot be reset if they are locked out or expire. Our network is slowly becoming disabled as email accounts are locked out and become inaccessible as well as log in access to our company SharePoint Site.

Our original AD Connect V1.5 installed on a 2012R2 server (which was configured for one way sync up to Azure) was depreciated and stopped working last week.
Exported a configuration file from the orginal AD connect 1.5 and used it to install the latest version V2.2 on another Server 2019 Domain controller.
A few initial issues with syncing were resolved. The AD Connect sync service manager shows the service is syncing successfully in all phases both with local domain and Azure service.
No errors in the on-Premises Domain Controller event viewer
Azure Portal Admin Dash show service to be healthy.
New AD accounts created on Premise sync quickly to Azure and appear available in the active users list and are available to have license and email assigned to them. .. but cannot access the account( ie log into 365 or the Azure Portal, etc.) with the password assigned when the account was created. Reset the password, using forgot my password indicate the password is reset successfully as well as get a notification in the Admin email that the password was reset successfully for the account, BUT THE PASSWORD DOES NOT WORK!
Microsoft Azure Support has been working on this issue since Wednesday of this week. Its been a rollercoaster. An Azure Engineer will work on the issue for a couple of hours then his shift ends up saying he is transferring the ticket to another Engineer and then nothing for 10, 12 hours. Of course, no phone number to call only email. I write a request to the ticket every hour for an update to try to get a response.
On Premise Passwords change still work for on Premise resources (logging into workstations, directory rights etc.
Azure Support Tech is looking at the back-end now

Has anyone seen an issue like this? I am thinking reaching out to third party help as this has become critical. any recommendations?

Dillon Silzer 57,491 Reputation points

2023-11-04T21:41:47.72+00:00

What reset password function are you using btw? The one in O365 or on-prem?
CowJazz 40 Reputation points

2023-11-04T22:21:35.71+00:00

Hey Dillon,

on Premise password resets works for on-premise devices on the network( logging into desktops etc) but it does not propagate to Azure,365, Sharepoint..) and I am losing access to email and content on the SharePoint site When I try to reset the password using "forgot my password" or "Reset my Password" on the log in dialogue box (after the password fails) attempting to log into 365 or Azure, it indicates that the password was successfully changed and I get an email in the admin account as well,,, but the new password does not work. Any method to reset the password to use any cloud services does not work and does not propagate to on Premise.
Dillon Silzer 57,491 Reputation points

2023-11-04T22:53:16.32+00:00

Do you have password writeback enabled?

https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr-writeback
CowJazz 40 Reputation points

2023-11-04T23:29:47.46+00:00

Yes I have. And the event viewer logs on the domain controller that AD connect is installed on show that password sync is running with out errors.
Dillon Silzer 57,491 Reputation points

2023-11-05T19:46:03.09+00:00
Just curious, what happens if you change their password from 365 Admin Portal? Does the password work then?

Also, when you connect to MSOnline, what does the following command say?

(Get-MsolCompanyInformation).DirSyncClientMachineName

MSOnline PS:

https://learn.microsoft.com/en-us/powershell/module/msonline/?view=azureadps-1.0
CowJazz 40 Reputation points

2023-11-05T20:18:54.92+00:00

Just curious, what happens if you change their password from 365 Admin Portal?:

It says the password was changed successfully (and I get a successful user password change notice in my Admin mail box as well),

However, The password does not work

(Get-MsolCompanyInformation).DirSyncClientMachineName :

PCSAD2 This is the name of the Domain controller Server AD Sync is installed on.

Share via

I am currently on Day 3 of a "Severity A" Microsoft Azure support ticket with Authentication issues

Your answer