Solution 1: Make sure that the logon account is set to the directory synchronization service account
Solution 2: Make sure that the directory synchronization account is set to log on as a service in Group PolicyTo make sure that the directory synchronization account is configured to log on as a service in the local policy, follow these steps:
- Click Start, type gpedit.msc in the search box, and then press Enter.
- Expand Computer Configuration, expand Window Settings, expand Security Settings, expand Local policies, and then click User rights assignment.
- Confirm that the directory synchronization service account is added to the following policies:
- Log on as a service
- Log on as batch job
- Log on locally
- If you made changes to the local policy, restart the computer to apply the changes.
Solution 3: Reinstall the directory synchronization applianceIf neither Solution 1 nor Solution 2 resolves the issue, remove and then reinstall the directory synchronization appliance.
For example, if you're using the Azure Active Directory Sync tool, remove and then reinstall it. Or, if you're using AAD Sync, remove and then reinstall it.
Article ID: 2995030 - Last Review: 20 Dec 2016 - Revision: 1