Password Hash Sync Password Reset timing

Question

I set up Password Hash Sync for our domain. We give new users a temporary password to sign in with and require them to change the password on login. The issue is that when the user resets their password it takes roughly 2ish minutes before the new password works. So they reset their password and login, but then when they launch an app like Teams or Outlook they are prompted to login again but the password they just created doesn't work unless they wait a few minutes. Do we have this setup wrong?

Answer 1

Hi @Dan Chandler-Klein

Thank you for asking this question on the **Microsoft Q&A Platform. **

There is nothing wrong with the Azure AD Connect configuration,

The synchronization is, usually, happens every 30 minutes, and you cannot set the automatic synchronization for less time.

You can force the synchronization with the following Powershell commands on the server where Azure AD Connect is installed:

Start-ADSyncSyncCycle -PolicyType Delta

This will only synchronize current changes.

Run the following command to force a complete sync but note that the length of sync time would be increased.

Start-ADSyncSyncCycle -PolicyType Initial

More info: https://techcommunity.microsoft.com/t5/itops-talk-blog/powershell-basics-how-to-force-azuread-connect-to-sync/ba-p/887043

Hope this helps,
Carlos Solís Salazar

----------

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.

---

Answer 2

Azure AD Connect's Password Hash Sync service runs every two minutes. This means that you can expect an updated hash to be reflected inside of Azure AD within 2 minutes - it could be as short as a few seconds, or as long as 2 minutes, depending on when the change was made in relation to the next start time. This is documented here: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization

There is not a supported way to lower this interval.

Answer 3

Dear @Danny Zollner Carlos Solís Salazar Good day to you. I have a question regarding the timing of password synchronization from AD Connect to Microsoft 365. As we know, synchronization usually occurs every 30 minutes. Is it possible to change this interval to less than 30 minutes, such as 10 or 5 minutes? Additionally, could you provide references and best practices for implementing this change in our organization?

Looking forward to hearing from you soon.

Best Regard,

Seyha