Azure AD Connect RPC Error 611

Question

Hi there,

I found out that the following error occurs with password hash synchronization:

How do you resolve this error?

Password Hash Synchronization agent is continuously getting failures for domain "my domain"

Please check 611 error events in the application event logs for details

AD Connector account had aPassword Hash Synchronization permission problem for the domain "my domain"

After checking the Event Viewer, it reveals that the error message 611 contains the following error:

Password hash synchronization failed for domain: "my domain", domain controller hostname: , domain controller IP address: Details:

Microsoft.Online.PasswordSynchronization.DirectoryReplicationServices.DrsException: RPC Error 8453 : Replication access denied. There was an error calling _IDL_DRSGetNCChanges.

Microsoft.Online.PasswordSynchronization.DirectoryReplicationServices.DrsRpcConnection.OnGetChanges(ReplicationState syncState)

Microsoft.Online.PasswordSynchronization.DirectoryReplicationServices.DrsConnection.GetChanges(ReplicationState replicationState)

Microsoft.Online.PasswordSynchronization.RetryUtility.ExecuteWithRetryT

Microsoft.Online.PasswordSynchronization.DeltaSynchronizationTask.SynchronizeCredentialsToCloud()

Microsoft.Online.PasswordSynchronization.PasswordSynchronizationTask.SynchronizeSecrets()

Microsoft.Online.PasswordSynchronization.SynchronizationExecutionContext.SynchronizeDomain()

Microsoft.Online.PasswordSynchronization.SynchronizationManager.SynchronizeDomain(SynchronizationExecutionContext syncExecutionContext)

Regards

Answer 1

You need to install the latest version of the Microsoft Entra Synchronization tool. For more information, see Install or upgrade the Directory Sync tool.

Password hash synchronization for Microsoft Entra ID stops working and event ID 611 is logged

If you have the above latest version, I will recommend going through the steps here and use the troubleshooter:

Troubleshoot password hash synchronization with Microsoft Entra Connect Sync

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola