Fix Mailbox Address Changing to onmicrosoft.com Automatically
Question details
Users in a Microsoft 365 hybrid environment experience their primary custom-domain email address unexpectedly reverting to the default tenant onmicrosoft.com address.
- Product
- Microsoft Exchange Hybrid
- Device & OS
- not provided
- Scenario
- Managing user mailboxes and directory synchronization in a Microsoft 365 and Azure AD Connect environment.
- Observed behavior
- The custom-domain proxy address is removed or downgraded, leaving the onmicrosoft.com address as the primary SMTP address. This is often triggered by directory synchronization processes, MFA resets, or licensing changes.
Ensure you have Active Directory Domain Services (AD DS) Administrator privileges and access to the Azure AD Connect server to modify on-premises synchronization attributes.
Correct the proxyAddresses Attribute in Local Active Directory
The most common cause of this issue is an incorrectly formatted proxyAddresses attribute being synced from your local AD to Azure AD.
In a hybrid environment, the local Active Directory acts as the source of truth for user attributes. Azure AD Connect relies on specific case-sensitive prefixes to differentiate between primary email addresses and aliases.
Launch 'Active Directory Users and Computers' (ADUC) on your domain controller.
Click on the 'View' menu at the top and ensure 'Advanced Features' is checked.
Right-click the affected user account, select 'Properties', and navigate to the 'Attribute Editor' tab.
Locate the `proxyAddresses` attribute and click 'Edit'. Ensure the primary custom domain address starts with an uppercase prefix (e.g., `SMTP:user@yourdomain.com`).
Ensure all secondary addresses or aliases start with a lowercase prefix (e.g., `smtp:user@yourtenant.onmicrosoft.com`). Apply the changes and run a manual Azure AD Connect sync.
Investigate Recent Licensing Changes and MFA Resets
Certain automated processes or backend updates can trigger unexpected attribute overwrites in Azure AD.
Open a Microsoft 365 Service Request
If directory synchronization is configured correctly but the address continues to revert, a backend Microsoft 365 configuration issue requires attention.
Manage Documents Seamlessly with WPS Office
While resolving complex Exchange Hybrid synchronization issues requires specialized Microsoft administrative tools, managing your daily documents shouldn't be complicated. WPS Office provides a lightweight, highly compatible alternative to Microsoft Office, enabling you to open, edit, and save files locally without relying on cloud synchronization.
- 1. Download the Installer: Visit the official WPS Office website and click on 'Free Download'.
- 2. Install WPS Office: Run the downloaded installer and follow the simple on-screen instructions to complete the setup.
- 3. Open Your Files: Open your existing Microsoft Word, Excel, or PowerPoint files directly in WPS Office for immediate editing.
Frequently Asked Questions
Why is the uppercase SMTP prefix important in the proxyAddresses attribute?
In Active Directory, the uppercase `SMTP:` prefix designates the primary email address for a user. Lowercase `smtp:` prefixes are used for secondary aliases. If the primary is missing or incorrectly capitalized, Microsoft 365 defaults to the standard onmicrosoft.com routing address.
Can assigning a new license temporarily change my primary email address?
Yes, in certain hybrid environments, backend provisioning processes triggered by self-service license signups or MFA changes can temporarily overwrite the proxy address back to the default tenant domain before the next directory sync completes.
How do I force an Azure AD Connect synchronization after fixing the proxy address?
You can force a delta sync by opening PowerShell on your Azure AD Connect server as an administrator and running the command `Start-ADSyncSyncCycle -PolicyType Delta`. This will push your local Active Directory changes to Microsoft 365 immediately.
