Azure AD Sync Data Mismatch with no data

Question

question

ShaunDelorez-8935 asked Mar 25, '22 ShaunDelorez-8935 commented Mar 25, '22

Azure AD Sync Data Mismatch with no data

I have a single on-prem account that fails sync with Azure.
Azure health portal shows a Data Mismatch, invalid softmatch. However, there are no details for the conflicting object:

The Sync tool shows this feedback:
Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [Mail OMITTED@racemark.com;].

So, somewhere there is an object with a "mail" attribute. I've used IDFix, and I don't find any duplicate. I don't find anything in Azure w/this address either.
Is there a way for me to look through my Azure tenant for this attribute?

azure-ad-connect

image.png (26.5 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-03-25T12:48:39.467Z

soysoliscarlos answered Mar 25, '22 ShaunDelorez-8935 commented Mar 25, '22

Hi @ShaunDelorez-8935

Thank you for asking this question on the Microsoft Q&A Platform.

In the User Attributes on your AD, look for ProxyAddresses attribute

Look for an alias with that email in your Azure AD, or maybe is a group with that email?

The mail "OMITTED@racemark.com" its duplicate, just is not the UPN

Hope this helps,
Carlos Solís Salazar

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ShaunDelorez-8935 · Mar 25 at 12:54 PM

Thanks, Carlos.

I've done those things.
I used IDFix to look for any AD Problems.
I used the Advanced Find in ADUC to search for anything using "OMITTED@racemark.com".
I'm trying to find a way to search my Azure tennant for the same attribute, but I'm not having much luck.

I did an initial look at Sharepoint and M365 Groups to see if any of them used that address...no matches.
That's why I'm at my wit's end here. Everywhere it could possibly be doesn't seem to be.

If I set a ProxyAddress attribute in AD, it says that's a duplicate. When I remove it, I get that the 'mail' attribute is possibly duplicate.
something is using that address somewhere, but I don't find where.

0 ·

question