Having AADSync issues

[rickjames]

Afternoon all,

 

I've been studying for 70-346 and with that have a demo tenant and I'm having a play around. Somehow, somewhere I've managed to break it

 

I set up Azure AD Connect last week and let it do it's thing and sync, however I've logged into the Admin portal and it's telling me there's no DirSync/Password sync for 3 days. I've looked at the following.

 

• IDFix gives me no reason/error other than what I've mentioned above
  
• 
  
• I've run Delta/Full synchronization of my local domain and AzureAD environment using both Powershell (-StartAADSyncCycle) and the Synchronization Service Manager. They both pass as successful and the logs also suggest it. Created a new user in AD and low and behold they haven't synced to O365
  

 

Is there anything else I can do to figure this highly irritating thing out? Suffice to say it's getting on my nerves somewhat

 

Many thanks!

Edited August 27, 2016 by rickjames

[Steve21]

One thing that to check, did you ever put it into live mode? As by default if you install it it sets in test mode until it's enabled live.

 

If you re-run the AAD connect exe does it show staging mode enabled on the first page?

 

Steve

[rickjames]

Hi Steve,

 

Yeah I checked that and it's live. Also checked staging mode in AAD Connect, it's already enabled. Just logged in and it's definitely doing it's syncs every 30 minutes like it should do and reporting as successful. I'm stumped!

[Steve21]

Is it enabled or live?

 

Staging mode enabled = test only reports and data won't sync up.

 

Steve

[Steve21]

During installation you can select the server to be in staging mode. This will make the server active for import and synchronization, but it will not do any exports. A server in staging mode will not run password sync or enable password writeback even if you select these features. When you disable staging mode, the server will start exporting and enable password sync and password writeback (if enabled).

 

https://azure.microsoft.com/en-gb/documentation/articles/active-directory-aadconnectsync-operations/

 

Steve

[rickjames]

A-ha! Disabled staging mode and it's playing ball. Cheers!

[Steve21]

No worries It's a silly system, you think it'd tell you something like in big warning "Please note testing enabled"

 

Steve

[rickjames]

Hmm, not sure if passwords have synced; changed a couple in AD and tried signing into 365 to no avail. Will give it half an hour.

[Steve21]

Did you enable password syncs? Another option to tick in the setup. Should be 2 mins tops otherwise (BUT it shows in the portal as a longer timeout, as there's 2 options full password syncs, and a delta for new passwords) If that makes sense?

 

Steve

[rickjames]

Password Synchronization is set to sync in the User Sign-In tab, but checking the Directory Sync status in the Admin Portal and it's set to false? Buh?! Edited August 27, 2016 by rickjames

[rickjames]

Sorted now, I think. Writeback/sync tabs not selected elsewhere. Cheerssssssssssssss.