Return
-
Title
Password updates are not syncing back from target to the source -
Description
We are currently syncing users between domains in preparation for an AD migration. Currently, password synchronization is not working properly. When updating the password on the target domain the update does not sync back to the source domain. -
Cause
Synchronization is configured one-way only or target object is not in the selected scope -
Resolution
Please click on Synchronization under the appropriate domain pair and validate if it's set one-way (source to target) or two-way. One-way synchronization will not modify source objects.
If synchronization is set two-way, please go to Synchronization properties, select target domain scope and validate if object in question is in the scope:
- object belong to the select OUs
- object is not in the exclusion list
- if Advanced (LDAP filter) field is populated, that object is matching the filter.Last, but not least, domain pair itself is having a Skip Objects option which may exclude builtin/admin, disabled and expired objects from the scope. Please validate that as well.