Azure AD Sync

[Jawloms]

Hi all,

 

I had Azure AD sync working for ages, then it suddenly stopped working. I couldn't get it working again so I just uninstalled it and started again. Now it's working again I get an email every half an hour;

 

Hello ,

You can troubleshoot this issue by running the Directory Synchronization troubleshooter on the server that has Azure Active Directory identity synchronization tools installed.
The Identity synchronization tool batch run was completed on Thursday, 23 June 2016 07:54:22 GMT for directory Debenham High School [DebenhamHighSchool.onmicrosoft.com]. 

The following errors occurred during synchronization:
Identity	Error Description	sourceAnchor

Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [userPrincipalName ;]. Correct or remove the duplicate values in your local directory. Please refer to http://support.microsoft.com/kb/2647098 for more information on identifying objects with duplicate attribute values.	KchehiwOtka31QTo9anonw==
We've recently introduced a new feature to help you resolve errors like this more easily. Click here to learn more.

Tracking ID: 10bea756-2380-493c-95cf-36ba700f4852 

Thank you,

The Azure Active Directory Team

Do not reply to this message. It was sent from an unmonitored email account.

 

The identity it's complaining about is me! I've tried this but when I get to step 5 in the solution, I get the below;

 

PS C:\Users\administrator.DEBENHAM-CC3\Desktop> get-mailbox | where {[string] $s
tr = ($_.EmailAddresses); $str.tolower().Contains($proxyAddress.tolower()) -eq $
true} | foreach {get-MSOLUser -UserPrincipalName $_.MicrosoftOnlineServicesID |
where {($_.LastDirSyncTime -eq $null)}}
At line:1 char:230
+ ... Time -eq $null)}}
+                    ~
The '<' operator is reserved for future use.
At line:1 char:247
+ ... ngularNoBind>}}
+                    ~
The '<' operator is reserved for future use.
   + CategoryInfo          : ParserError: ( [], ParentContainsErrorRecordEx
  ception
   + FullyQualifiedErrorId : RedirectionNotSupported

 

When I log in to the admin section of the portal and go to users and choose "Users with errors" it lists no-one.

 

Help! I'd really like to stop these emails every half an hour. I can't find any duplicate stuff. I don't know where to go next.

 

Thank you

 

Stuart

[sparkeh]

Not an answer to that issue but Azure AD Sync has been deprecated.

https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect-dirsync-deprecated/?WT.mc_id=DirSyncDepACOM

 

Azure AD Connect is the current tool to use

https://azure.microsoft.com/en-gb/documentation/articles/active-directory-aadconnect/

[Jawloms]

Not an answer to that issue but Azure AD Sync has been deprecated.

https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect-dirsync-deprecated/?WT.mc_id=DirSyncDepACOM

 

Azure AD Connect is the current tool to use

https://azure.microsoft.com/en-gb/documentation/articles/active-directory-aadconnect/

 

Thanks, I'd just realised I'd put the wrong thing. I am using Azure AD Connect.

[sparkeh]

Ah ok. Now, I think I had this problem, and I remember being annoyed at the lack of usernames after the troubleshooter ran.

 

If I remember correctly I ran a troubleshooter that dumped the names in c:\Office365Logs (yes the folder is still there will the affected names in there)

[Jawloms]

Which troubleshooter? The only one I can find is IDFix, and that doesn't list a problem with my account, or output to the c:\Office365Logs folder. Curiously though, it does list other issues.

[sparkeh]

Which troubleshooter? The only one I can find is IDFix, and that doesn't list a problem with my account, or output to the c:\Office365Logs folder. Curiously though, it does list other issues.

I believe that it was the "Troubleshooting Directory Synchronization tool" located here: http://aka.ms/hrcsync

[Jawloms]

I have now resolved the issues that IDFix was highlighting, and run the troubleshooter tool and have got no further. The log file generated in the C:\Office365Logs file lists no problems, but I am still getting the same email every half an hour. Has anyone got any more thoughts please?

 

Thank you

 

Stuart

[Jawloms]

Crossing fingers, touching wood, and not counting all my chickens, this seems to be fixed. I did this;

 

On local DC: ldifde -f dump.txt Search for the user in dump.txt, look at the ObjectGUID
Load up Windows Azure AD Module for Powershell Connect-MSOLService Get-MSOLUser -UserPrincipalName [email][email protected][/email] | fl UserPrincipalName, ImmutableID
Notice that the ImmutableID on Office 365 does not match the ObjectGUID we see in on premise AD
Run "Set-MSOLUser -UserPrincipalName [email][email protected][/email] -ImmutableID (Insert ID from ldifde ObjectGUID)"
Run Sync - done!

Which I found here.