MS-102 Question 186

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 2

  1. Yes, the user is synchronized. 2. No, Password WriteBack is disabled, so the password must be changed in Active Directory, if the user changes the password in the My Apps portal, it will be overridden by the password from AD in the next ADDC sync process. 3. No, if you configure Entra Connect with Password Hash Synchronization (Express Settings), the app will apply the PasswordNeverExpires policy for each user, unless you had configured the "CloudPasswordPolicyForPasswordSyncedUsersEnabled" prior to setup of Entra Connect. This is only seen by PowerShell, even if you have unchecked "Set passwords to never expire (recommended)" in the Admin Center. https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-password-hash-synchronization

• 3

  Also, you can't change your password every 90 days form Azure AD (Entra ID), because password writeback is disabled and it will be change from Active Directory (local) after the next synchronization

• 1

  Hello, Accordin to link below, you must enabble CloudPasswordPolicyForPasswordSyncedUsersEnabled before cloud Pasword can apply to Synced User. this feature is not enabled here therefore the answer is no https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-password-hash-synchronization