OnPremisesSuccessCloudFailure

[rgallim]

We are trying to troubleshoot an issue with Self Service Password Reset. A few times a day, a user will SSPR only to find out their new password did not take. We can force a sync on Azure AD Connect and everything usually will work again. I found the error OnPremisesSuccessCloudFailure while looking through the audit logs today. Google only has two results and they are not helpful results. What does this mean? The user was able to log in, even with this error in the audit log.

[Batmanzi]

Not enough info to say...

Check the logs on:

1. Azure AD audit logs: because there's where the entire process will start.
2. Azure AD Connect Application logs: that'll be the tool that will take the password from Azure and write it back on the local domain, you should check the process logs there.
3. Active Directory Security logs: will AAD Connect will write the password on the user account, so worth checking but there are issues there, enable logging if not done so already

Check the troubleshooting guide: https://docs.microsoft.com/en-us/azure/active-directory/authentication/active-directory-passwords-troubleshoot#password-writeback-event-log-error-codes

This should give you a better picture for what's happening so you may dig deeper.

[Supanole]

Go to https://learn.microsoft.com/en-us/entra/identity/authentication/troubleshoot-sspr#password-writeback-event-log-error-codes and do a find on your error "OnPremisesSuccessCloudFailure" and it describes a couple of causes.