AskTechGurus Get help now →

Accounts, Logins & Remote Access

Entra Connect sync has stopped — changes not reaching Microsoft 365

Entra Connect

Changes in on-premises Active Directory stop showing up in Microsoft 365. The sync service reports errors, has stopped, or the admin center warns that sync hasn't run recently.

What you’re seeing

  • The Microsoft 365 admin center warns that directory synchronization has not run recently.
  • Password changes, new users or group changes made in Active Directory do not appear in Microsoft 365.
  • Entra Connect Health or email alerts report sync errors or an export failure.
  • Departed employees disabled on-premises can still sign into Microsoft 365.

Common causes

Every environment is different, but these are the causes our engineers find most often:

  • The server running Entra Connect is off, out of disk space, or the sync service has stopped.
  • The Entra Connect version is outdated and no longer supported, so connections to Microsoft fail.
  • The account Entra Connect uses to talk to the cloud or to Active Directory has an expired password or was changed.
  • TLS or proxy changes on the server prevent it from reaching Microsoft endpoints.
  • Duplicate attributes or a large deletion threshold being hit stops exports to protect the tenant.

Why it matters

When sync stops, Microsoft 365 drifts out of step with your directory. New hires cannot sign in, password resets don't apply to email, and, most seriously, terminated employees whose accounts were disabled on-premises may retain access to email and files in the cloud. That gap is a real security and compliance exposure that often goes unnoticed for days.

How AskTechGurus fixes it

Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.

Tell us what’s happening

Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.

A certified engineer diagnoses it

A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.

Fixed and verified with you

The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.

Pay only when it’s resolved

Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.

Frequently asked questions

Are terminated users still able to get into email?

Possibly, if they were disabled on-premises after sync stopped. We check for this first and can secure those accounts directly while sync is being restored.

Will restarting sync push out a flood of unwanted changes?

Not if it is done carefully. We review pending exports and deletion warnings before resuming so nothing unexpected happens in the cloud.

Still stuck? Let a pro take it from here.

AskTechGurus connects you with vetted, US-based systems engineers who fix this every day. No call centers, no scripts, no surprise bills.

Start now →