When restoring an object from On Demand Recovery fails with the following error:
![image.png](https://questsoftware.file.force.com/servlet/rtaImage?eid=ka06R000000HiMV&feoid=00N6R00000J0qH7&refid=0EM6R000005Xpds)
Then if you click the error you will see information about an invalid password and cannot decrypt data.
![image.png](https://questsoftware.file.force.com/servlet/rtaImage?eid=ka06R000000HiMV&feoid=00N6R00000J0qH7&refid=0EM6R000005Xpdx)
Upon validation you notice that the object on Azure AD is restored successfully, but the on-premise AD object was not restored.