I have a problem change password with user removed from synchronization

Question

I have a problem change password with user removed from synchronization

Francesco Russo 195

Good morning,
I removed Entra ID Connect from synchronization to make some users cloud-only, but when changing the password at first login or manually changing it from error 12100 and from the logs you can see that it tries to write back the password, but naturally it fails as it should be and the error on the AADConnect, is there anything that needs to be done besides removing the user from synchronization?

Thank you

1 answer

Your answer

Answer 1

Ankush Raj 410 Microsoft Employee

Hi Francesco,

I'm Ankush from Microsoft and I'll be happy to assist you with your query.

Please let me know about the status of the effected users as visible from the azure portal.

Does the filter named as 'on prem sync enabled' is set to 'yes' or no'

User's image

Are the users themselves trying to change their password at the time of login? (if yes then check whether Self-service password reset feature is enabled or not).

Could you please provide the screenshot of the error for reference?

Looking forward for your response.

Regards,

Ankush

Francesco Russo 195 Reputation points

2024-11-18T10:27:59.14+00:00

Good morning,

the 'on prem sync enabled' parameter is set to no, the password was changed with the 'change password at first login' flag activated after the change from administrator and then an attempt was made to change the password also with the 'self service password' reset' in which 'Write back passwords' is also active for hybrid users.
Ankush Raj 410 Reputation points Microsoft Employee

2024-11-18T13:06:38.6466667+00:00

Thanks for responding.

I need you to uncheck the flag 'change password at first login' and observe whether the user is able to log in or not and share the possible output?

also run the command -> Get-ADSyncAADCompanyFeature on the Entra ID connect server and share me the results?

Looking forward for your response.

Regards,

Ankush.
Goutam Pratti 6,210 Reputation points Microsoft External Staff Moderator

2024-11-19T07:34:38.8533333+00:00

hello Francesco Russo

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Ankush Raj 410 Reputation points Microsoft Employee

2024-11-19T12:40:07.5466667+00:00

Hi @Francesco Russo

Just following up on the last response

If there are any challenges or additional details required, please don’t hesitate to let me know.

I look forward to your response to proceed with the next steps.
Francesco Russo 195 Reputation points

2024-11-19T14:00:20.25+00:00

I'm waiting for them to give me the ability to access the machine with Entra ID Connect installed
Ankush Raj 410 Reputation points Microsoft Employee

2024-11-20T04:54:05.7233333+00:00

Sure!
Francesco Russo 195 Reputation points

2024-11-20T09:43:40.4666667+00:00

@Goutam Pratti

This is the output of the requested command

PasswordHashSync           : True

ForcePasswordChangeOnLogOn : False

UserWriteback              : False

DeviceWriteback            : False

UnifiedGroupWriteback      : False

GroupWritebackV2           : False
Ankush Raj 410 Reputation points Microsoft Employee

2024-11-21T07:58:21.4766667+00:00

Hi @Francesco Russo

Thanks for your prompt response!

Additionally, please perform the following and let me know the result please?

I need you to uncheck the flag 'change password at first login' and observe whether the user is able to log in or not and share the possible output?

Regards,

Ankush
Francesco Russo 195 Reputation points

2024-11-21T09:08:00.96+00:00

yes, without changing the password at the first login it works, the user can log in easily with the password set by the administrator and the logs always show a completed login
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Ankush Raj 410 Reputation points Microsoft Employee

2024-11-25T07:35:54.9466667+00:00

Hi @Francesco Russo

Apologies for late response.

Since the user can then login successfully, do you have any other questions?

Regards,

Ankush
Goutam Pratti 6,210 Reputation points Microsoft External Staff Moderator

2024-11-26T12:29:09.6633333+00:00

Hello Francesco Russo,

Following up to see if Answer provided by Ankush Raj is helpful do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Francesco Russo 195 Reputation points

2024-11-26T12:33:08.47+00:00

no, Microsoft support told me that there is an open incident for this issue and the resolution is January 2025.

In my opinion the answer is not correct because you can't say if he logs in then it works
Ankush Raj 410 Reputation points Microsoft Employee

2024-11-28T06:15:46.5133333+00:00

Hi @Francesco Russo

Thanks for your response!

Could you please share the incident number so that I could connect with the engineer assigned and verify the issue promptly?

Regards,

Ankush

Share via

I have a problem change password with user removed from synchronization

1 answer

Your answer