Issue with Ad Sync Account

Shawn_888 1 Reputation point
2019-12-02T10:53:39.057+00:00

alt textalt textHi All
I am currently implementing a password hash sync for my local AD and Azure AD. This was actually a half done project by my previous guy who had left and I am picking it up to continue it. The first thing I did was to uninstalled the old Azure AD connect from another server which i assume should have remove any old connection or configuration setting and I set up another one on a different server with all the new sync configuration. I created a new OU for sync testing and move a few user over.
I run into some duplicate issue which I was able to clear beside the one such as in the attachment. I figure out that the account must have been either created first in Azure AD or already synced to an old domain server by the previous guy because the username in that problematic account that synced with the active directory is definitely incorrect from what I see inside the AD server. I need to at least know is what i suspect is correct

To make the matter more complex, the company were a cloud users first and then the local AD start appearing after that. They have also migrated from a old AD domain to a new AD domain
alt text

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,380 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. GK87 191 Reputation points
    2019-12-02T13:55:46.563+00:00

    At first: Please remove the sensitive user information!

    Have a look at this article followed by the solutions mentioned in this article which should help you on the way.

    (Sorry for the short message, just wanted to warn you on the sensitive user information you've supplied)


  2. Lukas Beran 176 Reputation points
    2019-12-03T11:16:08.693+00:00

    What is the UPN for the affected user in onprem AD? What UPN suffix it has? I think you have wrong UPN suffix for this user. This user account should have the justcoglobal.com UPN suffix. Then start initial sync (Start-adsyncsynccycle -policytype initial)