PPS failed to sync password. Error: "System.DirectoryServices.Protocols.LdapException: The supplied credential is invalid". (4383912)

Possible Causes:

1) The service account (default and/or optional credentials) username and/or password was entered incorrectly.

2) The service account (default and/or optional credentials) password has been changed or has expired.

3) The service account (default and/or optional credentials) lacks the required access rights to the target Active Directory environment.

Recommended Steps to Resolve:

1) Ensure the service account username is entered in UPN format (e.g., xxx@domain.com) rather than Domain\User format.

2) Verify that the service account credentials have access to the target.

• An Account with Full Write access to the target user objects in-scope for the password changes.
• Details can be found in the Requirements section of our user guide at https://support.quest.com/technical-documents/directory-sync-pro-for-active-directory/20.11.5/password-propagation-service-for-directory-sync-pro-user-guide

3) On the PPS Configuration page, update the password with the correct/new value, save the settings, and confirm that the credentials are applied successfully.

4) Restart the Quest DS Password Change Service service.

5) Reset a user's password and verify that it successfully synchronizes to the target.