Home / server / Questions / 912967
Accepted
Aravinda
Asked: 2018-05-20 20:04:34 +0800 CST

Password reset not working because password writeback not working in portal.azure.com

  • 772

I have a problem with portal.azure.com user password reset. I have configured hybrid identity with single sign on in azure AD and onpremis AD. The connection was made via Azure AD Connect.

The problem is I have configured password writeback already in AD Connect

Yet when I try to reset a password of a Windows Server AD user (For example "n3 n4" user in the below image) which is already populated in Azure AD it says

**Unfortunately, you cannot reset this user's password because password writeback is not enabled in your tenant.**

but users made in in Azure Active Directory (for example "admna" in the below image) can be reset.

enter image description here

This same azure tenant has a office 365 tenant as well. If i reset a user password via office 365, reset successful yet, then there are two passwords, one for onpremis windows login and the other is for office 365 . Apparently office 365 can reset password and its not sync to the local AD, while Azure portal cant reset password at all .

I can reset passwords via local AD and successfully sync to the cloud.If i reset via local AD and it will sync without any issue. Apparently sync works one way from local to Cloud and not vise versa.

When we look at directory sync no issues reported. (All green)

enter image description here

and here is my AD connect settings, Where "Adsync" user is a enterprise admin.

enter image description here

and also "Adsync" user has full control over Active directory users and computers in the below manner

enter image description here

And the azure global admin (admna) used to sync has following license. (https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-whats-next)

enter image description here

No matter what password reset in azure says,

enter image description here

Please guide me what I'm messing up? which direction I should take to troubleshoot/fix this? any help would be appreciated .

Thanks in advanced for you valuable time spent on this.

KR

Aravinda

active-directory

1 Answers

  1. Best Answer

    Basically I have missed 2 steps. Apart from above settings in the question itself,

    (1)Self service password reset should be turned on.

    enter image description here

    and from onpremis integration "write back passwords to onprmises directory" should be enabled.

    enter image description here

    and also this needs azure p2 or similar license and besides when a user loggs in it will ask to provide mobile/and different email.

    Users themselves can reset password now and Passwordwrite works and sync works as expected.

    • 1