Solved

Office 365 directory sync  issue

Posted on 2014-12-16
1
167 Views
Last Modified: 2014-12-23
Hello Experts,

I have a customer that recently performed a migration of all their operations from one site to another location.

In order to summarize the issue, whenever an account is enabled for O365 sometimes is never showed up in the o365 management console.

From what I understood on the initial assessment, the account was enabled by the name of jdoe@domainA.com email address for O365, and like I mentioned earlier, was never showed up in the o365 Management console.

Later on, the System Administrator found that the 0365 account used for sync is jdoemscloud@domainA.microsof.com. As per client “the password is definitely wrong on the DirSync server”

After further investigation, the network team has indicated that this could be a ADFS issue, however they also recommended to implement multicast for the Windows network load balancer [as per link http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006558].

Initial thoughts pointed to check the multicast setup on the upstream switch, static ARP entry.

What could be happen here that passwords and users are not synchronizing here?

Can you please send your thoughts regarding the ADFS troubleshooting steps and recommendation to fix this issue? Please provide step-by-step instructions.

Can you please provide your input regarding the Windows network load balancer option?

Is the article explained on link above accurate to isolate the network side of things? Could this be root cause of issue?

Please see environment below:

Exchange servers in an internal network with IP address 10.x.x.x

ADFS servers in a DMZ doing NAT with a Public IP address 4.x.x.x

Exchange is using another new IP public for the exchange server itself. I meant, is not going to NAT to the WNLB ADFS IP, it's going to NAT to the new Exchange server IP.

Your feedback is highly appreciated
0
Comment
Question by:Jerry Seinfield
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 42

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
ID: 40504196
If the on-prem UPN is jdoe@domainA.com, but the user ends up created as jdoemscloud@domainA.ONmicrosoft.com make sure that domainA.com is added and verified in Office 365. Best thing to do is to open the MIISClient (located in the dirsync install dir), go to the metaverse tab, search for the user. It will show you how the user was synced to the cloud and whether any errors occurred.

Exchange and AD FS are totally independent, and the logging issue is most likely caused by the different UPN for the user in the cloud. Or by the fact that the user is not synced at all (at least this is how I interpret the "never showed up in the o365 management console" bit, or you mean the EMC console?).
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question