Knowledge Base

When removing a Sync Server from the Sync Scopes list, you may encounter the following error: The selected server(s) cannot be removed from the sync scope because they are being used in one or more sync points. Remove the references to the servers from the sync points first Edit each sync point under the sync...

First to start let’s take a look at the required installed pieces that make up Specops Password Sync: Required Installs: Specops Password Sync Server This should be installed on a Windows Server. Handles the syncing over to your destination sync point. Specops Password Sync Notifier This is required to be installed on all writeable Domain...

Specops Password Sync by default will not synchronize password changes for privileged accounts. This default behavior is good security practice. You may see the following message in the Windows Application event logs on domain controllers when attempting to sync admin account passwords: Password will not be synchronized for user ‘username’ because the user is member...

Specops Password Sync Server service uses a self-signed certificate to encrypt traffic sent to it by the Password Sync Notifier Filter Service on your domain controllers. This certificate should be renewed prior to expiration in order to prevent communication issues between the domain controller notifiers and the sync server. Identify the Certificate Currently In Use...

When adding a new Password Sync server (either manually or via the Password Sync setup wizard) you may encounter the following error: This error indicates an issue writing an SPN for the server’s computer account in Active Directory. Administrators can work around this issue by manually creating the SPNs in Active Directory. Run the following...

Permissions inherited to subobjects are:Inherited to all subobjectsReset PasswordSPECIAL ACCESS for pwdLastSetWRITE PROPERTYREAD PROPERTYSPECIAL ACCESS for lockoutTimeWRITE PROPERTYREAD PROPERTY

Specops Password Auditor Password Policy customers should download Password Auditor directly from Password Policy Domain Administration. Updates to Password Auditor can be downloaded from within the Password Auditor application — if an update is available, you will see a prompt to download it. Specops Password Policy https://env-specopssoftcom-premstaging.kinsta.cloud/support/en/password-policy/download.htm uReset You would do this directly through the...

This guide will walk you through the process of moving individual components of Password Sync over to a new server. Password Sync/Change Notifier If you are on the latest version or choose to not upgrade, all you would need to do is install the change notification MSI onto the new DCs which you can do...