How to fix Entra Connect Sync

Prageeth@ 20 Reputation points
2024-10-18T01:04:03.75+00:00

Hi all,

I am trying to upgrade previously working Azure AD Connect to Entra Connect so sync will on-prem server DC and M365 will begin again.

Screenshot 1 - https://snipboard.io/x86SnL.jpg

Screenshot 2 - https://snipboard.io/0ZOX9k.jpg

Any help will be greatly appreciated. Thank you.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Intune | Other
0 comments No comments
{count} votes

Answer accepted by question author
  1. Abiola Akinbade 30,365 Reputation points Volunteer Moderator
    2024-10-20T01:08:28.92+00:00

    Hello Marius,

    Thanks for your question.

    Please can you go to Azure and search for your directory sync account as MFA may have been enabled on it. The account should be this format.

    User's image

    Exclude account from all CA policies.

    https://learn.microsoft.com/en-us/entra/id-governance/conditional-access-exclusion

    Please let me know if you have further questions.

    If the above information was useful, please remember to 'Accept Answer'

    1 person found this answer helpful.
    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. Andy David - MVP 159.7K Reputation points MVP Volunteer Moderator
    2024-10-18T12:01:26.09+00:00

    You have to ensure the sync accounts are excluded from MFA:

    https://www.alitajran.com/conditional-access-mfa-breaks-azure-ad-connect-synchronization/

    1 person found this answer helpful.

  2. Prageeth@ 20 Reputation points
    2024-11-03T23:34:50.6466667+00:00

    Thank you for both of your answers. It really helped me to troubleshoot in the right direction.

    Eventually, noticed MFA was forced on the DC sync account on M365 end. I removed enforcement and sync is working fine now.

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.