User passwords aren't synced, and "Password Synchronization has not been activated for this company" error is logged in Event Viewer
Problem
After you discover that some users can't sign in to a Microsoft cloud service such as Microsoft 365, Microsoft Intune, or Microsoft Azure, you notice that user passwords aren't being synced from your local Active Directory Domain Services (AD DS) environment to Microsoft Entra ID. When you view the Application login Event Viewer, you see that the following event ID 6900 error is logged:
The server encountered an unexpected error while processing a password change notification:
"An error occurred. Error Code: 90. Error Description: Password Synchronization has not been activated for this company
This issue may occur if password synchronization was disabled after it was set up in the Azure Active Directory Sync appliance.
Solution
To resolve this issue, enable password synchronization. To do so, take one of the following actions, as appropriate to the Azure Active Directory Sync appliance that you're running.
If you're running the Azure Active Directory Sync tool
Run the Azure Active Directory Sync Configuration Wizard, and then, on the Password Synchronization page, select the Enable Password Synchronization check box. Doing this finishes the password synchronization setup and starts a full sync.
If you're running Microsoft Entra Connect
Open Windows PowerShell.
Run the following commands:
Import-Module ADSync $aadcon = Get-ADSyncConnector | Where {$_.Type -eq "Extensible2"} Set-ADSyncAADPasswordSyncState -ConnectorName $aadcon. Name -Enable $True
More Information
Still need help? Go to Microsoft Community or the Microsoft Entra Forums website.
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for