"UserAccountEnabledMissing" error on DirSync

Question

Hi,

new users can’t be synced/added into AAD because of failure:

Running management agent: Windows Azure Active Directory Connector

Error: UserAccountEnabledMissing

Connected data source error code: 0x8023134a

Connected data source error: (Translated) This object can not be updated in Azure Active Directory as an attribute [AccountEnabled] is not valid. Update the value of the local directory services.

Attribute userAccountControl is set to 0x220 =dec 544 for most of users in domain. Users have password set and valid, accounts are not locked. 

Small amount of users can be still added to AAD with the same settings. 

DirSync is still in use, but this error appeared about month ago, and we can’t find out the root cause. 

Thx in advance for any kind of support :) 

//Jan

Answer 1

Hi Jan,

May I collect some information to analyze the issue?

1. Do you mean only newly-created users have this issue, and old users are not affected?
2. What is your DirSync/AAD Connect tool version?
3. Could you provide an entire screenshot of the error message?
4. Open miisclient.exe (Synchronization Service Manger), could you provide several screenshots of the detailed error message?
5. Please try these steps:

a. Go to miisclient.exe (Synchronization Service Manger) -> Connectors

b. Select your local AD connector, click Run, select Full Import, click OK.

c. Then, please run Full Synchronization.

d. Select Azure AD connector, also run Full Import and Full Synchronization.

Does the issue persist?

Thanks,

Young

Answer 2

Hi, 

Full sync fixed that issue (at least for now). And yes, only newly created user accounts were affected. 

Thank you Young.

BR, 

Jan

Answer 3

Hi Jan,

If you have any update, please feel free to let me know.

Thanks,

Young