Fix Azure AD Connect Requesting Password for Sync Account
Question details
The user is prompted to enter a password for an automatically generated Sync_xxxx onmicrosoft.com account during Azure AD Connect setup, preventing synchronization.
- Product
- Azure AD Connect
- Device & OS
- not provided
- Scenario
- Running the Azure AD Connect setup or configuring directory synchronization.
- Observed behavior
- The setup wizard unexpectedly requests the password for the auto-created synchronization service account, causing synchronization to halt and fail.
Ensure you have your Active Directory Enterprise Administrator and Azure AD Global Administrator credentials available before troubleshooting your synchronization setup.
Verify Required Credentials and Installation Type
Confirm the exact credentials requested by the setup wizard and avoid modifying the auto-generated service account to restore synchronization.
During an express installation, Azure AD Connect creates a synchronization service account (typically formatted as Sync_xxxx@onmicrosoft.com). This account is managed automatically by the system. Manual modification of its password or settings will break the directory synchronization.
Carefully read the prompt in the Azure AD Connect wizard. An express installation requires your Active Directory Enterprise Administrator and Azure AD Global Administrator credentials, not the password for the synchronization service account.
Leave the Sync_xxxx@onmicrosoft.com account exactly as generated. Do not attempt to reset its password in the Microsoft 365 Admin Center or Azure portal, as doing so severs the trusted connection.
Check your directory settings to see if any custom configurations were applied after the initial express installation. If settings were altered, re-run the Azure AD Connect wizard and use your Global Administrator credentials to repair the configuration.
Looking for a Reliable and Free Office Suite for Your Enterprise?
While Azure AD Connect manages your directory synchronization for Microsoft services, providing your team with powerful document editing tools shouldn't be complicated or expensive. WPS Office offers a lightweight, highly compatible alternative to Microsoft Office.
- 1. Download the installer: Visit the official WPS Office website and click the Free Download button.
- 2. Run the installation: Open the downloaded file and follow the lightweight setup wizard.
- 3. Start working: Launch WPS Office to instantly open, edit, and save your existing Microsoft Office documents.
Frequently Asked Questions
What is the Sync_xxxx@onmicrosoft.com account used for?
This is a specialized synchronization service account automatically generated by Azure AD Connect. It is used exclusively in the background to manage and authorize data synchronization between your on-premises Active Directory and Azure AD.
Can I manually reset the password for the Azure AD Connect sync account?
It is strongly recommended not to manually change or reset the password for this auto-generated sync account. Modifying its credentials will disrupt the synchronization process and cause connection failures.
Why did my Azure AD Connect sync stop working suddenly?
Synchronization often fails if the sync service account was accidentally modified, if its permissions were revoked, or if the on-premises Active Directory password policy forced a change. Re-running the Azure AD Connect wizard usually resolves these credential mismatches.
