Entra Cloud Sync Not Updating Group Names

Question

Entra Cloud Sync Not Updating Group Names

Anon4343 541

We've made changes to an on-premises Active Directory group and not all of the changes are synchronizing.

Renamed Display Name and pre-2000 name - Did not synchronize
Added Group Members - Synchronized
Updated description - Synchronized

We're using the Entra Cloud Sync Azure AD Connect Provisioning Agent version 1.1.1586.0 . This is the latest version.

In the Cloud Sync provisioning logs, we can see that it's referencing the new on-premises Active Directory group name. How do we rename the Entra ID group name to match?

Anon4343 541 Reputation points

2025-03-04T18:41:14.13+00:00
Thank you Venkata.

The domain value that's used by AD DS attributes hasn't been verified.

The cn, name, and sAMAccountName are all the same and correct.

One or more object attributes that require a unique value have a duplicate attribute value (such as the proxyAddresses attribute or the UserPrincipalName attribute) in an existing user account.

Group membership and description changes are replicating.

One or more object attributes violate formatting requirements that restrict the characters and the character length of attribute values.

Name only has letters and dashes. No different than other groups.

One or more object attributes match exclusion rules for directory synchronization.

These are common attributes, so they shouldn't be excluded.

IDFix

Thanks, I did not know about tool. After running it, the group in question did not return an error.
Venkata Jagadeep 650 Reputation points Microsoft External Staff

2025-03-06T00:18:36.8366667+00:00

Hello Anon4343,

Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Accepted answer

3 additional answers

Your answer

Anon4343 541 Reputation points

2025-03-04T18:41:14.13+00:00

Thank you Venkata.

The domain value that's used by AD DS attributes hasn't been verified.

The cn, name, and sAMAccountName are all the same and correct.

One or more object attributes that require a unique value have a duplicate attribute value (such as the proxyAddresses attribute or the UserPrincipalName attribute) in an existing user account.

Group membership and description changes are replicating.

One or more object attributes violate formatting requirements that restrict the characters and the character length of attribute values.

Name only has letters and dashes. No different than other groups.

One or more object attributes match exclusion rules for directory synchronization.

These are common attributes, so they shouldn't be excluded.

IDFix

Thanks, I did not know about tool. After running it, the group in question did not return an error.
Venkata Jagadeep 650 Reputation points Microsoft External Staff

2025-03-06T00:18:36.8366667+00:00

Hello Anon4343,

Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Answer 1

Venkata Jagadeep 650 Microsoft External Staff

Hello Anon4343,

Thank you for the information.

Few groups from on-prem AD are not syncing to azure.

This is due to empty information on "Display Name" attribute. By filling the field "Display Name" these groups are syncing to Entra ID.

Answer 2

Hello Anon4343,

Thank you for posting the query in Microsoft Q&A.

Renaming on-premises Active Directory group name not syncing to Entra ID while using cloud sync tool.

This issue occurs for one of the following reasons:

The domain value that's used by AD DS attributes hasn't been verified.
One or more object attributes that require a unique value have a duplicate attribute value (such as the proxyAddresses attribute or the U serPrincipalName attribute) in an existing user account.
One or more object attributes violate formatting requirements that restrict the characters and the character length of attribute values.
One or more object attributes match exclusion rules for directory synchronization.

We suggest you to use the IdFix DirSync Error Remediation Tool to find objects and errors that prevent synchronization to Microsoft Entra ID. It displays object attribute values that would be reported as errors by the supported directory synchronization tool.

Please follow the steps mentioned in the below document to run IdFix tool.

https://microsoft.github.io/idfix/Step%203%20-%20Query%20and%20fix%20invalid%20attributes/

Please refer the below document

https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/user-prov-sync/objects-dont-sync-ad-sync-tool

Anon4343 541 Reputation points

2025-03-06T14:20:12.44+00:00

Thank you Venkata.

The domain value that's used by AD DS attributes hasn't been verified.

The cn, name, and sAMAccountName are all the same and correct.

One or more object attributes that require a unique value have a duplicate attribute value (such as the proxyAddresses attribute or the UserPrincipalName attribute) in an existing user account.

Group membership and description changes are replicating.

One or more object attributes violate formatting requirements that restrict the characters and the character length of attribute values.

Name only has letters and dashes. No different than other groups.

One or more object attributes match exclusion rules for directory synchronization.

These are common attributes, so they shouldn't be excluded.

IDFix

Thanks, I did not know about tool. After running it, the group in question did not return an error.

Answer 3

Josh Villagomez 85 Microsoft Employee

Entra Cloud Sync contains a default attribute mapping for DisplayName. The attribute mapping is an Expression such as:

IIF(IsPresent([displayName]), [displayName], [cn])

Take a look at the "Apply this mapping" setting and make sure it is set to Always, not Only During Object Creation.

Also, what happens when you do a Provision on Demand against that object?

Anon4343 541 Reputation points

2025-03-12T19:51:10.5966667+00:00

Apply this mapping is set to Always.

Provision on demand faills because this is a group not a user.
Josh Villagomez 85 Reputation points Microsoft Employee

2025-03-12T21:35:07.3233333+00:00

Ok, thanks for confirming this. Have you tried restarting the Cloud Sync App? All else fails, you may need to create a support ticket and allow us to review the provisioning logs internally.
Anon4343 541 Reputation points

2025-03-13T15:00:32.6533333+00:00

Thanks Josh. The services were restarted. I'll open a support ticket.

Answer 4

Anon4343 541

We opened a ticket with Microsoft support and found that filling in the DisplayName attribute of the group resolved the issue.

Share via

Entra Cloud Sync Not Updating Group Names

3 additional answers

Your answer