Having some sync errors in AD Connect that I'm trying to figure out how to resolve.

Question

Hi Good Evening Everyone,

We are getting some sync errors in our environment and trying to figure out what the issue is. The error we're getting are dn-attributes-failure errors.

Answer 1

The error Dn-Attribute-failure happens when duplicate attribute values exist for 2 or more objects in the on-premises domain but those values cannot be assigned to multiple users in Azure AD

To resolve this error, you need to correct the duplicate attributes in your on-premises AD all the users who are part of the affected group. After making the changes in your local AD, Run a full sync cycle:

 Start-ADSyncSyncCycle -PolicyType Initial

You can use the idfix tool to find: https://microsoft.github.io/idfix/

See: https://learn.microsoft.com/en-us/troubleshoot/azure/entra/entra-id/user-prov-sync/troubleshoot-aad-connect-objects-attributes

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola