I have a problem change password with user removed from synchronization

Francesco Russo 175

Good morning,
I removed Entra ID Connect from synchronization to make some users cloud-only, but when changing the password at first login or manually changing it from error 12100 and from the logs you can see that it tries to write back the password, but naturally it fails as it should be and the error on the AADConnect, is there anything that needs to be done besides removing the user from synchronization?

Thank you

1 answer

Ankush Raj 0 Reputation points Microsoft Employee

2024-11-18T10:19:02.6033333+00:00

Hi Francesco,

I'm Ankush from Microsoft and I'll be happy to assist you with your query.

Please let me know about the status of the effected users as visible from the azure portal.

Does the filter named as 'on prem sync enabled' is set to 'yes' or no'

Are the users themselves trying to change their password at the time of login? (if yes then check whether Self-service password reset feature is enabled or not).

Could you please provide the screenshot of the error for reference?

Looking forward for your response.

Regards,

Ankush
Please sign in to rate this answer.
Francesco Russo 175 Reputation points

2024-11-18T10:27:59.14+00:00

Good morning,

the 'on prem sync enabled' parameter is set to no, the password was changed with the 'change password at first login' flag activated after the change from administrator and then an attempt was made to change the password also with the 'self service password' reset' in which 'Write back passwords' is also active for hybrid users.

Ankush Raj 0 Reputation points Microsoft Employee

2024-11-18T13:06:38.6466667+00:00

Thanks for responding.

I need you to uncheck the flag 'change password at first login' and observe whether the user is able to log in or not and share the possible output?

also run the command -> Get-ADSyncAADCompanyFeature on the Entra ID connect server and share me the results?

Looking forward for your response.

Regards,

Ankush.

Goutam Pratti 495 Reputation points Microsoft Vendor

2024-11-19T07:34:38.8533333+00:00

hello Francesco Russo

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

I have a problem change password with user removed from synchronization

1 answer

Your answer