Hi Thomas,
Yes, you are right. In most cases, this issue involves the GPO and especially the password policy if you have.
As you know, DirSync Wizard will create a user account (MSOL_AD_Sync) in the forest root domain's user container (or OU) when running the DirSync Wizard, and it also sets a password on the account and sets the account's password to never expire. If the event log shows the warning "Resetting password for user MSOL...", it may be caused by that the MSOL_AD_Sync account was set to disabled and "User must change password and next logon".
In this situation, I'd like to suggest you check your current password policy or GPO in the AD, and try to bypass all GPO or other policy for this user (MSOL_AD_Sync) and re-run the wizard to check the result.
Thanks,
Bourne Zhang
