Azure Sync Issue With Thumbnails

Question

Out of no where about a week ago, we started having sync errors with most if not all of my user objects. The error on each of them is that the thumbnail is too big. But we haven't touched anything. We've made no changes. Anyone know any causes to look at?

"Unable to update this object in Azure Active Directory, because the attribute [extension_8c8da6d3b024455b8c907efe87d588f1_thumbnailPhoto], in the local Directory exceeds the maximum allowed length. If you want to update, reduce the length in the local directory services, and then try again."

Answer 1

Hello @Mark Zavorski ,

Thanks for reaching out.

Usually, this happens when someone configured an thumbnailPhoto attribute to flow by creating new extension from "Directory extensions" wizard from Azure AD connect as shown below, you can re-run the wizard by going to "customize synchronization options" to confirm if thumbnailPhoto attribute present there? if so then try removing them.

Moreover, just removing them from wizard doesn't clear pending export error from Azure AD connect local database, so I would recommend you to create custom sync rule which clear pending error from local database, then you can delete this custom sync rule once all pending errors cleanup.

Resolution:

1) Re-run the wizard by going to "customize synchronization options" and remove thumbnailPhoto attribute
2) Then, go to Sync rules editor and configure the following outbound rule exactly as in the pictures below:

3) Run an initial sync through powershell Start-ADSyncSyncCycle -PolicyType Initial

Once all export errors cleaned up then delete above custom rule which is no longer required.

Sharing here similar post for your reference. Hope this helps.

---

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hello. This post has helped sort out the Thumbnail on user accounts. Can someone let me know the steps for Groups please.