Solved

Active Directory and Office 365 Won't Sync

Posted on 2014-11-04
1
1,947 Views
Last Modified: 2015-01-06
We use Windows Azure Active Directory Sync Service to synchronize the user accounts in our AD with Office 365.  Currently the Azure AD Sync Service is stopped and attempts to restart it have been unsuccessful.  The Event Log says it won't start because the Forefront Identity Manager Synchronization Service is not running and that the Azure AD Sync Service is dependent upon it.

Attempts to restart the FIM Aync Serivce have been unsuccessful. When attempting to start it Event ID 7024 appears in the system log in the event viewer and says "the FIM Synchronization Service failed to start with server specific error %%2149781504".  Event ID 6028 simultaneously appears in the APP log in the event viewer and says, "The server encryption keys could not be accessed.  Verify that the service account has permissions to the following registry key, hkey local machine\microsoft\forefront\2010\synchronization service."  The service account the FIM Sync service uses does have full permissions to that key.

Any information on what we can do to get the FIM Sync Service running so that the Azure AD Sync service will run would be greatly appreciated.  Thanks in advance.
0
Comment
Question by:sswmoore
1 Comment
 
LVL 40

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
ID: 40423892
Just reinstall it, or use the newly released AadSync tool: http://msdn.microsoft.com/en-us/library/azure/dn790204.aspx

Otherwise, check the local groups (FIMSyncAdmins and/or ADSyncAdmins) and make sure the account running the service is added .
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
OfficeMate Freezes on login or does not load after login credentials are input.
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question