Getting DirectoryServiceException error when we are syncing more than 90 values in attribute msExchExtensionCustomAttribute2

Question

Getting DirectoryServiceException error when we are syncing more than 90 values in attribute msExchExtensionCustomAttribute2

SURANA Mudit 0

Hello Team,

We are hybrid (AD + Azure AD) and have many values defined in attributes msExchExtensionCustomAttribute2 and msExchExtensionCustomAttribute3 we use this for opera roles.

Basically, when we update values in it, and it is more than 90 (msExchExtensionCustomAttribute2 and msExchExtensionCustomAttribute3 combined) then it stops the sync for that user and in Sync tool we see the error

"An internal error has occurred. This operation will be retried during the next synchronization. If the issue persists for more than 24 hours, contact Technical Support.

Tracking Id: 2ca60502-d560-4f65-bfe6-f16d6ee1fa14

ExtraErrorDetails:

[{"Key":"ObjectId","Value":["24ffXXXXXXXXXXXXde611"]}]"

and in AAD portal under sync errors we see "DirectoryServiceException"

As soon as we reduce the values to 90 or less it works fine. Can you help here? I am trying to find relevant article but many i found were unanswered or related to Proxyaddresses thing. Here it is not the case of proxy addresses.

Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator

2025-01-08T22:56:03.3533333+00:00

Hi @SURANA Mudit ,

Thank you for reaching out Microsoft Q&A.

I understand you are getting an error: *An internal error has occurred. This operation will be retried during the next synchronization. If the issue persists for more than 24 hours, contact Technical Support *when you update values in it, and it is more than 90 (msExchExtensionCustomAttribute2 and msExchExtensionCustomAttribute3 combined)

Manually run a sync cycle, then from PowerShell run Start-ADSyncSyncCycle -PolicyType Delta
observe the behaviour and let me know, if still the error continues provide the screen shot of Synchronization service and also screen shot Synchronization rules if any added for the msExchExtensionCustomAttribute2 and msExchExtensionCustomAttribute3 and also in event viewer go to windows Logs>Application observe if you got any event log error during synchronization if yes provide the screen shot of error.

Regards,
Goutam Pratti.
SURANA Mudit 0 Reputation points

2025-01-09T12:15:28.77+00:00

Thanks for your message, Goutam.

I have executed policytype Delta command also it is running every hour hope that would help too.

Please find requested screenshots.

Event vwr error for corresponding user.PNG

Attribute screenshot from AAD connect.PNG

Sync rule.PNG

Sync issue-1.PNG

PS: it is not only one user. All users are affected if the values are more than 90 values.

Hope that helps.

MS
Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator

2025-01-10T21:34:15.9933333+00:00

Hello @SURANA Mudit ,

Thank you for your prompt response and sharing the details.

let's connect offline and discuss further on this.

Here my contact details: Please send me an email to 'azcommunity@microsoft.com' with Sub - Attn: gpratti and following details in the email body: Link to this thread/post.

Regards,
Goutam Pratti.
Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator

2025-01-16T22:08:58.04+00:00

Hello @SURANA Mudit ,

We haven’t heard from you on the last response and was just checking back to see and discuss further in offline

1 answer

Your answer

Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator

2025-01-08T22:56:03.3533333+00:00

Hi @SURANA Mudit ,

Thank you for reaching out Microsoft Q&A.

I understand you are getting an error: *An internal error has occurred. This operation will be retried during the next synchronization. If the issue persists for more than 24 hours, contact Technical Support *when you update values in it, and it is more than 90 (msExchExtensionCustomAttribute2 and msExchExtensionCustomAttribute3 combined)

Manually run a sync cycle, then from PowerShell run Start-ADSyncSyncCycle -PolicyType Delta
observe the behaviour and let me know, if still the error continues provide the screen shot of Synchronization service and also screen shot Synchronization rules if any added for the msExchExtensionCustomAttribute2 and msExchExtensionCustomAttribute3 and also in event viewer go to windows Logs>Application observe if you got any event log error during synchronization if yes provide the screen shot of error.

Regards,
Goutam Pratti.
SURANA Mudit 0 Reputation points

2025-01-09T12:15:28.77+00:00

Thanks for your message, Goutam.

I have executed policytype Delta command also it is running every hour hope that would help too.

Please find requested screenshots.

Event vwr error for corresponding user.PNG

Attribute screenshot from AAD connect.PNG

Sync rule.PNG

Sync issue-1.PNG

PS: it is not only one user. All users are affected if the values are more than 90 values.

Hope that helps.

MS
Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator

2025-01-10T21:34:15.9933333+00:00

Hello @SURANA Mudit ,

Thank you for your prompt response and sharing the details.

let's connect offline and discuss further on this.

Here my contact details: Please send me an email to 'azcommunity@microsoft.com' with Sub - Attn: gpratti and following details in the email body: Link to this thread/post.

Regards,
Goutam Pratti.
Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator

2025-01-16T22:08:58.04+00:00

Hello @SURANA Mudit ,

We haven’t heard from you on the last response and was just checking back to see and discuss further in offline

Answer 1

@SURANA Mudit Apologies for the delayed response, on reviewing the above screenshots related to your issue.

Microsoft Entra ID doesn't impose limits per attribute, except for a hard-coded limit of 15 certificates in the userCertificate attribute and up to 100 attributes for Directory extensions with a maximum of 250 characters for each directory extension. There's a size limit for the whole object. When Microsoft Entra Connect tries to sync an object that exceeds this object size limit, an export error is thrown.

All attributes contribute to the object's final size. Some attributes have different weight multipliers because of additional processing overhead. An example is indexed values. Also, different cloud services, service plans, and licenses might be assigned to the account, which consume even more attributes and contribute to the overall size of the object.

Let me know if this helps to answer your query, feel free to post back if any questions.

Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2025-01-24T07:39:55.1366667+00:00

@SURANA Mudit Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.

Share via

Getting DirectoryServiceException error when we are syncing more than 90 values in attribute msExchExtensionCustomAttribute2

1 answer

Your answer