Hi BenjaminV,
To troubleshoot the issue, please refer to the following steps:
Step 1 – Check if the password sync is enabled.
1. On the Directory Synchronization server, open "C:\Program Files\Windows Azure Active Directory Sync\DirSyncConfigShell.psc1"
2. Run the cmdlet Get-CoexistenceConfiguration -DumpObject $true.
This will dump the configuration.
If (IsPasswordSyncing = TRUE), then tenant is password synchronization that is enabled for this tenant. If so, please move on the next step.
Step 2- create a registry key and force Dirsync.
1.Create a registry key that's named PasswordSync, and then assign permissions for the MIIS_Service account. To do this, follow these steps:
a. Open Registry Editor, locate and then select the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSOLCoExistence
b. On the Edit menu, point to New, and then click Key.
c. Type PasswordSync, and then press Enter.
d. Right-click the PasswordSync key, click Permissions, and then set the following permissions for the MIIS_Service account:
Query Value
Set Value
Create Subkey
Enumerate Subkeys
Notify
Read Control
2. Create a new registry entry that's named FullSyncRequired in the PasswordSync key that you created earlier in step 1. To do this, follow these steps:
a. In Registry Editor, select the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSOLCoExistence\PasswordSync
b. On the Edit menu, point to New, and then click DWORD Value.
c. Type FullSyncRequired, and then press Enter.
d. On the Edit menu, click Modify, type 1 in the Value data box, and then click OK.
e. Exit Registry Editor.
3. Restart services that are associated with password synchronization. To do this, follow these steps:
a. Click Start, click the Start Search box, type services.msc, and then press Enter.
b. Right-click Forefront Identity Manager Synchronization Service, and then click Restart.
c. Right-click Windows Azure Active Directory Sync Service, and then click Restart.
After that, you need to follow the steps below to force Dirsync:
1.Open the file path: C:\Program Files\Windows Azure Active Directory Sync, locate the file named DirSyncConfigShell.psc1. right click on it and click Open.
2.Type Start-OnlineCoexistenceSync in the command window and press the Enter key. You can find more details about the script via: http://technet.microsoft.com/en-us/library/jj151771.aspx
Thanks,
Johnny Zhang