Skip to content

Clarify ADSync service account password change process#1954

Draft
akosre wants to merge 11 commits intoMicrosoftDocs:mainfrom
akosre:patch-7
Draft

Clarify ADSync service account password change process#1954
akosre wants to merge 11 commits intoMicrosoftDocs:mainfrom
akosre:patch-7

Conversation

@akosre
Copy link
Copy Markdown
Contributor

@akosre akosre commented Apr 25, 2026

Updated references to ADSync service account and Entra ID Connector account for clarity and consistency. Adjusted instructions regarding password changes and encryption key handling.

Updated references to ADSync service account and Entra ID Connector account for clarity and consistency. Adjusted instructions regarding password changes and encryption key handling.
@prmerger-automator
Copy link
Copy Markdown
Contributor

@akosre : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit 2542231:

⚠️ Validation status: warnings

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ⚠️Warning Details

docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md

  • Line 58, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#start-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#re-start-the-synchronization-service'?

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

@akosre akosre marked this pull request as draft April 25, 2026 22:15
Reorder steps for connecting Sync Change Service account
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit 6c34ecc:

⚠️ Validation status: warnings

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ⚠️Warning Details

docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md

  • Line 50, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#stop-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#1-stop-the-synchronization-service'?
  • Line 52, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#abandon-the-existing-encryption-key' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#2-abandon-the-existing-encryption-key'?
  • Line 54, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#start-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#3-start-the-synchronization-service'?
  • Line 56, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#provide-the-password-of-the-ad-ds-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#4-provide-the-password-of-the-ad-ds-connector-account'?
  • Line 58, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#reinitialize-the-password-of-the-entra-id-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#5-reinitialize-the-password-of-the-entra-id-connector-account'?
  • Line 60, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 69, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 84, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 93, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 108, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

@ttorble
Copy link
Copy Markdown
Contributor

ttorble commented Apr 27, 2026

@omondiatieno

Can you review the proposed changes?

This content requires automated and human checks available only in the private repository. If you approve the changes, please close this PR (#please-close) and move the commits to the private repository. If you need help moving the commits, contact the publicprs alias.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates Microsoft Entra Connect Sync documentation to clarify which accounts are involved when changing the ADSync service account password, and adjusts the procedure steps around abandoning/recreating the encryption key and re-entering connector credentials.

Changes:

  • Rewords the intro/background to reference the AD DS Connector account and Entra ID Connector account more explicitly.
  • Reorders/renames the procedural steps (stop service, abandon key, restart service, re-enter credentials).
  • Updates connector credential instructions and related terminology for consistency.

Comment thread docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md Outdated
5. [Reinitialize the password of the Entra Id Connector account](#reinitialize-the-password-of-the-entra-id-connector-account)

4. [Start the Synchronization Service](#start-the-synchronization-service)
<br><nbsp>
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"
" isn't valid HTML/Markdown and is likely to render as literal text. Prefer removing these spacing tags (or replace with normal Markdown spacing) throughout the procedure sections.

Copilot uses AI. Check for mistakes.
Comment thread docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md Outdated
Comment on lines +111 to +115

You can't directly provide the password of the Microsoft Entra Id connector account to the Synchronization Service. Instead, you need to use the cmdlet **Add-ADSyncAADServiceAccount** to reinitialize the Microsoft Entra Id Connector account. The cmdlet resets the account password and makes it available to the Synchronization Service:

1. Sign in to the Microsoft Entra Connect Sync server and open PowerShell.
2. To provide the Microsoft Entra Global Administrator credentials, run `$credential = Get-Credential`.
2. To provide the Microsoft Entra Id Global Administrator credentials, run `$credential = Get-Credential`.
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This section mixes "Id"/"ID" (for example, "Microsoft Entra Id connector account" and "Microsoft Entra Id Global Administrator"). Use "ID" consistently (and keep the account name consistent with the rest of the doc) to match official product naming.

Copilot uses AI. Check for mistakes.

#### Start the Synchronization Service
Now that the Synchronization Service has access to the encryption key and all the passwords it needs, you can restart the service in the Windows Service Control Manager:
The cmdlet resets the password for the Entra Id Connector account and updates it in Microsoft Entra ID and the Synchronization Service.
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The summary sentence uses "Entra Id Connector account"; please change to "Entra ID" (and align with the chosen full account name, e.g., "Microsoft Entra ID Connector account").

Copilot uses AI. Check for mistakes.
Comment thread docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md Outdated
---
# Changing the ADSync service account password
If you change the ADSync service account password, the Synchronization Service doesn't start correctly until you abandon the encryption key and reinitialized the ADSync service account password.
Changing the ADSync service account password can prevent the Synchronization Service from starting successfully. When this occurs, the encryption key must be discarded and re-created, and the passwords for both the AD Connector account and the Microsoft Entra ID Connect account must be re-condfigured.
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This intro sentence introduces "AD Connector account" and "Microsoft Entra ID Connect account", but the rest of the article uses "AD DS Connector account" / "(Microsoft) Entra ID Connector account". Align these terms to the established names to avoid confusing readers about which credentials need updating.

Suggested change
Changing the ADSync service account password can prevent the Synchronization Service from starting successfully. When this occurs, the encryption key must be discarded and re-created, and the passwords for both the AD Connector account and the Microsoft Entra ID Connect account must be re-condfigured.
Changing the ADSync service account password can prevent the Synchronization Service from starting successfully. When this occurs, the encryption key must be discarded and re-created, and the passwords for both the AD DS Connector account and the Microsoft Entra ID Connector account must be re-condfigured.

Copilot uses AI. Check for mistakes.
Comment thread docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md Outdated
2. Select **Microsoft Entra ID Sync** and click Stop.

#### Abandon the existing encryption key
<br><nbsp>
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same issue as earlier: "
" is not valid HTML. Please remove/replace it here as well to avoid broken rendering.

Copilot uses AI. Check for mistakes.
akosre and others added 2 commits April 28, 2026 01:07
corrected typo

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit 72328af:

⚠️ Validation status: warnings

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ⚠️Warning Details

docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md

  • Line 50, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#stop-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#1-stop-the-synchronization-service'?
  • Line 52, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#abandon-the-existing-encryption-key' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#2-abandon-the-existing-encryption-key'?
  • Line 54, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#start-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#3-start-the-synchronization-service'?
  • Line 56, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#provide-the-password-of-the-ad-ds-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#4-provide-the-password-of-the-ad-ds-connector-account'?
  • Line 58, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#reinitialize-the-password-of-the-entra-id-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#5-reinitialize-the-password-of-the-entra-id-connector-account'?
  • Line 60, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 69, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 84, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 93, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 108, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

fixed numbering issue and removed not supported tags.
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit ca40c74:

⚠️ Validation status: warnings

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ⚠️Warning Details

docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md

  • Line 50, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#stop-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#1-stop-the-synchronization-service'?
  • Line 52, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#abandon-the-existing-encryption-key' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#2-abandon-the-existing-encryption-key'?
  • Line 54, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#start-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#3-start-the-synchronization-service'?
  • Line 56, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#provide-the-password-of-the-ad-ds-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#4-provide-the-password-of-the-ad-ds-connector-account'?
  • Line 58, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#reinitialize-the-password-of-the-entra-id-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#5-reinitialize-the-password-of-the-entra-id-connector-account'?
  • Line 60, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 69, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 84, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 93, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.
  • Line 108, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit ac14a4c:

⚠️ Validation status: warnings

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ⚠️Warning Details

docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md

  • Line 50, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#stop-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#1-stop-the-synchronization-service'?
  • Line 52, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#abandon-the-existing-encryption-key' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#2-abandon-the-existing-encryption-key'?
  • Line 54, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#start-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#3-start-the-synchronization-service'?
  • Line 56, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#provide-the-password-of-the-ad-ds-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#4-provide-the-password-of-the-ad-ds-connector-account'?
  • Line 58, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#reinitialize-the-password-of-the-entra-id-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#5-reinitialize-the-password-of-the-entra-id-connector-account'?
  • Line 60, Column 6: [Warning: disallowed-html-tag - See documentation] HTML tag 'nbsp' isn't allowed. Replace it with approved Markdown or escape the brackets if the content is a placeholder.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

Updated steps for stopping and restarting the Synchronization Service, and clarified the process for providing passwords for AD DS and Entra ID Connector accounts.
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit 97302e0:

⚠️ Validation status: warnings

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ⚠️Warning Details

docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md

  • Line 50, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#stop-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#1-stop-the-synchronization-service'?
  • Line 52, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#abandon-the-existing-encryption-key' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#2-abandon-the-existing-encryption-key'?
  • Line 54, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#start-the-synchronization-service' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#3-start-the-synchronization-service'?
  • Line 56, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#provide-the-password-of-the-ad-ds-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#4-provide-the-password-of-the-ad-ds-connector-account'?
  • Line 58, Column 4: [Warning: bookmark-not-found - See documentation] Cannot find bookmark '#reinitialize-the-password-of-the-entra-id-connector-account' in 'identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md', did you mean '#5-reinitialize-the-password-of-the-entra-id-connector-account'?

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

akosre added 2 commits April 28, 2026 01:27
Clarified the warning regarding changing the ADSync service account password based on the build version.
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit 03102db:

✅ Validation status: passed

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ✅Succeeded

For more details, please refer to the build report.

@prmerger-automator
Copy link
Copy Markdown
Contributor

PRMerger Results

Issue Description
File Change Percent This PR contains file(s) with more than 30% file change.

@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit bb0f2f5:

✅ Validation status: passed

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ✅Succeeded

For more details, please refer to the build report.

@prmerger-automator
Copy link
Copy Markdown
Contributor

PRMerger Results

Issue Description
File Change Percent This PR contains file(s) with more than 30% file change.

@akosre
Copy link
Copy Markdown
Contributor Author

akosre commented Apr 27, 2026

@omondiatieno

Can you review the proposed changes?

This content requires automated and human checks available only in the private repository. If you approve the changes, please close this PR (#please-close) and move the commits to the private repository. If you need help moving the commits, contact the publicprs alias.

#label:"aq-pr-triaged" @MicrosoftDocs/public-repo-pr-review-team

Hello Tracey,
thank you for your suggestion. I applied the suggested changes.

Copy link
Copy Markdown
Contributor

@omondiatieno omondiatieno left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR Review: Style compliance check

Summary

Severity Count
BLOCKING 11
Suggestion 4
[Pre-existing] 3

Key issues

Formatting (BLOCKING):

  • Sequential numbering (1., 2., 3.) must use 1. for all items (auto-numbering).
  • Sub-step numbering (1.1., 2.1., etc.) is not valid markdown — these render as plain text, not numbered lists. Use indented 1. lists instead.

Terminology (BLOCKING):

  • "click" must be "select" for UI actions (3 occurrences).
  • "Entra ID" must always include "Microsoft" prefix — "Microsoft Entra ID" (3 occurrences).
  • UI elements "Stop" and "Restart" need bold formatting.

Content accuracy (BLOCKING):

  • Step 3 description was carried over from the old step order — says the service "has access to all the passwords it needs" but passwords aren't reconfigured until steps 4 and 5.

Accessibility (BLOCKING):

  • Alt text on line 99 fails all 3 accessibility checks (missing prefix, missing period, too short).
  • Also, </br> is invalid HTML — should be <br>.

Pre-existing issues (not in diff — fix if convenient):

  • Line 15, 41: Admonition syntax >[!IMPORTANT] missing space after >.
  • Line 42: Admonition continuation >The following... missing space after >.

✅ Rescan verification complete — all checklist sections confirmed.

Note: This review covers markdown source analysis only. Verify rendered output, image quality, and include file rendering manually in the staged preview.

1. [Stop the Synchronization Service](#1-stop-the-synchronization-service)

1. [Abandon the existing encryption key](#abandon-the-existing-encryption-key)
2. [Abandon the existing encryption key](#2-abandon-the-existing-encryption-key)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

BLOCKING — Numbering format: Use 1. for all ordered list items (markdown auto-numbering), not sequential 1., 2., 3., etc. This applies to lines 50–58.

Suggested change
2. [Abandon the existing encryption key](#2-abandon-the-existing-encryption-key)
1. [Abandon the existing encryption key](#2-abandon-the-existing-encryption-key)


1. Go to Windows Service Control Manager (START → Services).
2. Select **Microsoft Entra ID Sync** and click Stop.
1.1. Go to Windows Service Control Manager (START → Services).
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

BLOCKING — Sub-step numbering format: 1.1., 1.2. etc. aren't valid markdown list syntax — they render as plain text paragraphs, not as numbered lists. Use standard numbered lists (1.) with 4-space indentation under the parent step. This issue affects all sub-steps throughout the article (lines 66–67, 74–80, 90–91, 98–105, 114–116).

Suggested change
1.1. Go to Windows Service Control Manager (START → Services).
1. Go to Windows Service Control Manager (START → Services).

1. Go to Windows Service Control Manager (START → Services).
2. Select **Microsoft Entra ID Sync** and click Stop.
1.1. Go to Windows Service Control Manager (START → Services).
1.2. Select **Microsoft Entra ID Sync** and click Stop.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

BLOCKING — Input verb + missing bold: Use "select" instead of "click" for UI actions. The UI element "Stop" must be bold.

Suggested change
1.2. Select **Microsoft Entra ID Sync** and click Stop.
1. Select **Microsoft Entra ID Sync** and select **Stop**.



#### 3. Start the Synchronization Service
Now that the Synchronization Service has access to the encryption key and all the passwords it needs, you can restart the service in the Windows Service Control Manager:
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

BLOCKING — Incorrect description after reordering: This text says the service "has access to the encryption key and all the passwords it needs" but at step 3, passwords haven't been reconfigured yet (that's steps 4 and 5). The description was carried over from the original step 5 and needs updating for the new order.

Suggested change
Now that the Synchronization Service has access to the encryption key and all the passwords it needs, you can restart the service in the Windows Service Control Manager:
After abandoning the old encryption key, restart the Synchronization Service so that it can generate a new encryption key. You can then reconfigure the required account passwords in the following steps:



3.1. Go to Windows Service Control Manager (START → Services).
3.2. Select **Microsoft Entra ID Sync** and click Restart.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

BLOCKING — Input verb + missing bold: Use "select" instead of "click". "Restart" must be bold.

Suggested change
3.2. Select **Microsoft Entra ID Sync** and click Restart.
1. Select **Microsoft Entra ID Sync** and select **Restart**.


#### Start the Synchronization Service
Now that the Synchronization Service has access to the encryption key and all the passwords it needs, you can restart the service in the Windows Service Control Manager:
The cmdlet resets the password for the Entra ID Connector account and updates it in Microsoft Entra ID and the Synchronization Service.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

BLOCKING — Product naming: "Entra ID Connector account" must include "Microsoft".

Suggested change
The cmdlet resets the password for the Entra ID Connector account and updates it in Microsoft Entra ID and the Synchronization Service.
The cmdlet resets the password for the Microsoft Entra ID Connector account and updates it in Microsoft Entra ID and the Synchronization Service.

Comment thread docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md Outdated


#### 1. Stop the Synchronization Service
First you can stop the service in the Windows Service Control Manager. Make sure that the service isn't running when attempting to stop it. If it is, wait until it completes and then stop it.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggestion — Double spaces: Two spaces after "Manager." and after "it."

Suggested change
First you can stop the service in the Windows Service Control Manager. Make sure that the service isn't running when attempting to stop it. If it is, wait until it completes and then stop it.
First you can stop the service in the Windows Service Control Manager. Make sure that the service isn't running when attempting to stop it. If it is, wait until it completes and then stop it.

Comment thread docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md Outdated
2. To provide the Microsoft Entra Global Administrator credentials, run `$credential = Get-Credential`.
3. Run the cmdlet `Add-ADSyncAADServiceAccount -AADCredential $credential`.
5.1. Sign in to the Microsoft Entra Connect Sync server and open PowerShell.
5.2. To provide the Microsoft Entra ID Global Administrator credentials, run `$credential = Get-Credential`.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggestion — Role naming: The standard role name is "Global Administrator". "Microsoft Entra ID Global Administrator" isn't an official role name.

Suggested change
5.2. To provide the Microsoft Entra ID Global Administrator credentials, run `$credential = Get-Credential`.
1. To provide Global Administrator credentials, run `$credential = Get-Credential`.

akosre and others added 2 commits May 1, 2026 00:29
Co-authored-by: Jackline Omondi <57798781+omondiatieno@users.noreply.github.com>
Co-authored-by: Jackline Omondi <57798781+omondiatieno@users.noreply.github.com>
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit c537fe8:

✅ Validation status: passed

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ✅Succeeded

For more details, please refer to the build report.

@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit 55eafcf:

✅ Validation status: passed

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ✅Succeeded

For more details, please refer to the build report.

@prmerger-automator
Copy link
Copy Markdown
Contributor

PRMerger Results

Issue Description
File Change Percent This PR contains file(s) with more than 30% file change.

…s.md

Updated the numbering format in the document for clarity and consistency.
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit bb227c3:

✅ Validation status: passed

File Status Preview URL Details
docs/identity/hybrid/connect/how-to-connect-sync-change-serviceacct-pass.md ✅Succeeded

For more details, please refer to the build report.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants