Microsoft Entra Connect Health sync error with blank account.

Question

I have a Microsoft Entra Connect Health Sync error with an account that is blank, and I am unable to find it in local AD or Microsoft Entra ID to delete it and resolve the sync error. How can delete this blank user object?

The object failed synchronization
Display Name: (Blank)

Object Type: user

User Principal Name: (Blank)

Distinguished Name: CN={2F66514D6834486F6930654B3059354D506F686348513D3D}

Mail: (Blank)

Object GUID: 5a0af104-2851-4c42-bc01-6a0ffd4374ef

Synchronization Status: Synchronized to Microsoft Entra ID

Source Anchor: /fQMh4Hoi0eK0Y5MPohcHQ==

Answer 1

This usually occurs due to an orphaned object.

You can do a metaverse search to find the object and search for the object using its Object GUID (5a0af104-2851-4c42-bc01-6a0ffd4374ef) or Distinguished Name https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-service-manager-ui-mvsearch

From there if you find it, you can further then proceed to go to the connector space then you can be able to remove the object. You can find it by the Guid.

After doing this you'd need to run an initial sync to fully sync the changes

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola

Answer 2

I was not able to find the account using the Synchronization Service Manager on my local domain controller. I should have included the error type message of:
Error Type DeletingCloudOnlyObjectNotAllowed

Answer 3

I was able the resolve this by opening up the Export error message in Synchronization Service Manager on my local domain controller and it gave me ExtraErrorDetails: [{"Key":"ObjectId","Value":["7b61e40a-67d7-48d1-95e6-97fa506c70c7"]}]. When I checked the account, I found that it was a user account that was deleted 8 months ago (it had some issue when deleted, that was not noticed). I used following PowerShell commands to remove the account:
Connect to your Microsoft Entra tenant: Connect-MgGraph -Scopes User.ReadWrite.All
Check the account: Get-MgUser -UserId 7b61e40a-67d7-48d1-95e6-97fa506c70c7
Remove-MgUser -UserId 7b61e40a-67d7-48d1-95e6-97fa506c70c7 -Confirm:$false