AD Sync password sync issues (Event ID 611)

AD Sync password sync issues (Event ID 611)

Event ID 611
Password synchronization failed for domain: pei.com

Details:
System.DirectoryServices.Protocols.LdapException: The operation was aborted because the client side timeout limit was exceeded.

To resolve, a registry setting has to be changed on the server running AD Sync, followed by a reboot:

1. On the server running AD Sync, open regedit.
2. Navigate to the key:
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ldap
3. Set the value of LdapClientIntegrity to 0.
4. Restart the server.
5. After the restart, trigger a new sync by manually running the task scheduler or by running the directory synchronization command DirectorySyncClientCmd.exe. A full sync is not required.

Brandon Stuart, PEI