Azure AD Connect – How to verify password synchronization is working

If you have installed Azure AD Connect with Password Synchronization

  • (which you should even if you are using ADFS – see this blog for reason why)

ADConnectPasswordSync

And you have forced a Full Password Synchronization (e.g. by using a script as described here )

How do you verify if the Password Synchronization is working?

Open the application log in event viewer

  1.  Look for Event ID 656 “Password Change Request”

EventID656

2.  Look for Event ID 657 “Password Change Result: Success” read more

Azure AD Connect – PowerShell Script to trigger a full password sync

If you’re using the Azure AD Connect tool (or Azure AD Sync Service) to synchronize you’re on premise Active Directory with the Azure Active Directory, you can use this script from TechNet to trigger a full password synchronization

PasswordSynchronizationScript

You need to replace the following

  • fabrikam.com
  • aaddocteam.onmicrosoft.com – AAD

with the names of the connectors in your own environment.  This can be found in the Synchronization Service Manager (installed when you install Azure AD Connect) read more

Exchange 2013 OWA & Cisco ASA Clientless VPN – Doesn’t Work!

I came across the following issue while planning an Exchange 2010 to Exchange 2013 upgrade for one of my customers.

They use OWA, and publish access to this externally using Cisco ASA clientless VPN. However, after some initial testing and investigation, we found that there is bug with the Cisco ASA Clientless VPN which prevents Exchange 2013 OWA working – bug CSCul27869 to be specific.  Currently there is no workaround! read more