Password sync O365

[nicholab]

Password sync from the Dirsync tools does not seem to be working even thought it is the latest version. Is this down to the office 365 password policy?

[FN-GM]

Is this a brand new setup? I would go into the DirSync Console and do 1 full sync, instead of the automatic delta sync. Also check you have the password sync option enabled.

 

Thanks

[nicholab]

I have move the Dirsync software to another server but it is a new O365 set-up. I have enable password sync when I ran the set-up wizard. Where do I set it in the forefront manager? Also do I need Azure power shell installed on the Dirsync DC?

[FN-GM]

No you don't need anything installed on the DC. You do the full sync from ForeFront.

[nicholab]

If I go to ForeFront > Management Agents > Active directory connector > configure directory partitions password synchronization is ticked but when I click on Target management Agents Windows azure active directory connector password management is disabled?

[nicholab]

I am right in thinking that password sync does not work on Windows 2008 non R2? Why?

[EduTech]

If I go to ForeFront > Management Agents > Active directory connector > configure directory partitions password synchronization is ticked but when I click on Target management Agents Windows azure active directory connector password management is disabled?

 

Hi,

 

Do NOT make any changes to the FIM Management Agent in terms of this configuration step as you will break directory sync, It's not a supported change. Password Sync should be enabled via the Configuration Wizard.

 

If you have enabled passwordsync via the Configuration Wizard you may find that you need to do a Full Password Sync. In order to do this, Launch PowerShell on the server where Directory Sync is installed

 

Import-Module DirSync

Set-FullPasswordSync

 

If you then restart the FIMSynchronizationService you should see all the events for Password Sync appear in the Application Event Log.

 

I hope that helps,

James.

[nicholab]

If I try that I get Import-Module : a positional parameter cannot be found that accepts argument 'Set-FullPasswordSync'.

[EduTech]

If I try that I get Import-Module : a positional parameter cannot be found that accepts argument 'Set-FullPasswordSync'.

 

If you are running the latest version, then that is how you get access to the dirsync powershell commandlets.

 

ensure that you do the first line first so that the module imports, send me a print screen.

 

Thanks,

James.

[nicholab]

I have now run that and I get in the event logs.

 

The server encountered an unexpected error while processing a password change notification:

 

"Could not load file or assembly 'Microsoft.Online.PasswordSynchronization.Rpc.dll' or one of its dependencies. The specified module could not be found.

 

at Microsoft.Online.PasswordSynchronization.Fim.PasswordHashConnector.CreateSynchronizationManager(IEnumerable`1 contextConfiguration, ISourcePasswordChangeNotification syncEngineHandle, IList`1 partitionInfo, SynchronizationConfiguration configuration)

at Microsoft.Online.PasswordSynchronization.Fim.PasswordHashConnector.StartSynchronizationManager(ActiveDirectoryConfiguration directoryConfig, IList`1 admaPartitionInfoSet, ISourcePasswordChangeNotification fimSyncEngineHandle)

at Microsoft.Online.PasswordSynchronization.Fim.PasswordHashConnector.Synchronize(ActiveDirectoryConfiguration config, String extensionPrivateConfig, IList`1 partitionInfo, ISourcePasswordChangeNotification syncEngineHandle)

at PasswordHashSynchronization.SynchronizationThread(Object data)