服务器最近同步错误, MS工程师查看, 问题是Scheduler Suspended:

 


 wKioL1m_QzTw8keEAAaGa5AcmiY446.png-wh_50

解决方法:

 

  1. PowerShell使用命令: get-ADSyncScheduler 查看状态(我们的状态是True,所以暂停了):

  wKiom1m_Q4OzyXVLAAA00PYjXM4975.png-wh_50  

 

2. 使用命令Set-ADSyncScheduler–SchedulerSuspended $False , 然后再次运行 Start-ADSyncSyncCycle –PolicyType Delta重新同步.


3. 使用Trigger Full Password Sync同步:


1) 将下列命令保存为PS1格式:


$adConnector = "xxxx.com" 

$aadConnector = "xxxx.onmicrosoft.com - AAD" 

Import-Module adsync

$c = Get-ADSyncConnector -Name $adConnector

$p = New-Object Microsoft.IdentityManagement.PowerShell.ObjectModel.ConfigurationParameter "Microsoft.Synchronize.ForceFullPasswordSync", String, ConnectorGlobal, $null, $null, $null

$p.Value = 1

$c.GlobalParameters.Remove($p.Name)

$c.GlobalParameters.Add($p)

$c = Add-ADSyncConnector -Connector $c

Set-ADSyncAADPasswordSyncConfiguration -SourceConnector $adConnector -TargetConnector $aadConnector -Enable $false

Set-ADSyncAADPasswordSyncConfiguration -SourceConnector $adConnector -TargetConnector $aadConnector -Enable $true 


2)使用Powershell运行命令:

 

使用Active Directory Module forWindows PowerShell 管理员权限打开 (可在AdministrativeTools找到) :

 wKiom1m_RJzxF9AtAACJNRpbQ4g704.png-wh_50


 

运行附件的scripts :

 

运行scripts需找到文件路径, 并在文件前输入.\才能运行. 如果文件包括空格, 需要在运行文件名上加上双引号:


wKioL1m_RYaQsf4OAAAcjLE7suc468.png-wh_50


 

运行后Password Sync正常了:


wKiom1m_RLnjZ9ywAAAoXq3vHjU324.png-wh_50