ODMAD Directory Sync Issue: unable to create users or groups. Error: "Write: Unable to create <NAME>, object already exists" (4321041)

A recurring issue has been observed with user or group creation in a specific site. Previously, user objects were removed from the target domain to resolve the issue, but the error continues to reappear over time.

The reported error is as follows:
"Write: Unable to create <NAME>, object already exists"

The error indicates that the user object already exists in the target domain. Key factors to investigate include:

1. Object Existence in Target: Confirm via PowerShell using the SAMAccountName whether the object exists in the target domain.
2. Scope Misalignment:
   • The object was not read into Directory Sync because it resides in an Organizational Unit (OU) or Common Name (CN) that is not within the scope of the Read step.
   • Alternatively, the object is within scope but does not meet the matching criteria defined in the workflow’s Match step attribute mapping.

To resolve the issue:

1. Verify and Resolve Duplicates:

   • Check for duplicate objects in the target domain and take appropriate actions to resolve them.
   • Once duplicates are resolved, allow workflows to sync the changes.

2. Validate Target OU Scope:

   • Ensure the target environment includes the Default Target OU in the ‘Organizational Units’ tab of the ODM AD Environments section for the target domain.
   • Verify that all necessary OUs are listed and marked as in scope for this workflow.

3. Review Match Criteria:

   • Examine the source and target object attributes to ensure they contain a matching value that satisfies the workflow’s Match step.

4. Contact Us:

   • If the above steps do not resolve the issue, contact Product Support for further assistance.