Solved

Active Directory and Office 365 Won't Sync

Posted on 2014-11-04
1
2,219 Views
Last Modified: 2015-01-06
We use Windows Azure Active Directory Sync Service to synchronize the user accounts in our AD with Office 365.  Currently the Azure AD Sync Service is stopped and attempts to restart it have been unsuccessful.  The Event Log says it won't start because the Forefront Identity Manager Synchronization Service is not running and that the Azure AD Sync Service is dependent upon it.

Attempts to restart the FIM Aync Serivce have been unsuccessful. When attempting to start it Event ID 7024 appears in the system log in the event viewer and says "the FIM Synchronization Service failed to start with server specific error %%2149781504".  Event ID 6028 simultaneously appears in the APP log in the event viewer and says, "The server encryption keys could not be accessed.  Verify that the service account has permissions to the following registry key, hkey local machine\microsoft\forefront\2010\synchronization service."  The service account the FIM Sync service uses does have full permissions to that key.

Any information on what we can do to get the FIM Sync Service running so that the Azure AD Sync service will run would be greatly appreciated.  Thanks in advance.
0
Comment
Question by:sswmoore
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 41

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
ID: 40423892
Just reinstall it, or use the newly released AadSync tool: http://msdn.microsoft.com/en-us/library/azure/dn790204.aspx

Otherwise, check the local groups (FIMSyncAdmins and/or ADSyncAdmins) and make sure the account running the service is added .
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The following article is comprised of the pearls we have garnered deploying virtualization solutions since Virtual Server 2005 and subsequent 2008 RTM+ Hyper-V in standalone and clustered environments.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question