Exam AZ-103 All Questions

View all questions & answers for the AZ-103 exam

Exam AZ-103 topic 16 question 71 discussion

Actual exam question from Microsoft's AZ-103

Question #: 71
Topic #: 16

You have a Microsoft 365 subscription and a hybrid deployment of Azure Active Directory (Azure AD). User identities and password hashes are synced.
You have a user account named User1.
From Active Directory, you select the User must change password at next logon account option for User1.
What will occur if User1 attempts to sigh in to myapps.microsoft.com?

A. User1 will be prompted for a password change.
B. User1 will sign in by using the old password.
C. User1 will be prevented from signing in.

Show Suggested Answer

Suggested Answer: C 🗳️
Troubleshoot password synchronization
Some users can't sign in to Office 365, Azure, or Microsoft Intune
In this scenario, passwords of most users appear to be syncing. However, there are some users whose passwords appear not to sync. The following are scenarios in which a user cannot sign in to a Microsoft cloud service such as Office 365, Azure, or Intune. They include information about how to troubleshoot each scenario.
Scenario 1: The "User must change password at next logon" check box is selected for the user's account
To resolve this issue, follow these steps:
1. Do one of the following:
In the user account properties in Active Directory Users and Computers, clear the User must change password at next logon check box.
Have the user change their on-premises user account password.
2. Wait a few minutes for the change to sync between the on-premises Active Directory Domain Services (AD DS) and Azure AD.
References:
https://support.microsoft.com/en-us/help/2855271/how-to-troubleshoot-password-synchronization-when-using-an-azure-ad-sy

by Lyon at June 2, 2020, 10:59 p.m.

Comments

Submit Cancel

JackBauer

Highly Voted 4 years, 12 months ago

No. This happened for weeks at my work. Every Monday the new starters would come and Service Desk would get calls for unable to login. The solution is not to tick "user must change password at next logon". You give them a password. They login via O365 etc. Then instruct them to change their password. In the scenario. C is the correct answer.

upvoted 9 times

praveen97

4 years, 11 months ago

Yes, answer C is correct.

upvoted 2 times

...

Lyon

Highly Voted 5 years ago

A seems right

upvoted 8 times

Lyon

5 years ago

Question explanation doesn't seem to apply to the question being asked, as there is no issue with synchronization mentioned in the question.

upvoted 4 times

dbMz

5 years ago

True. They force user to change password on next login, so he will be prompted to change it... The explanation is for unsynced hash...

upvoted 3 times

...

Amir1909

Most Recent 1 year, 4 months ago

C is correct

upvoted 1 times

...

Dylan

4 years, 6 months ago

Correct answer - there are PowerShell commands that can deal with this now but no mention of them being used here

upvoted 1 times

...

arseyam

4 years, 9 months ago

The answer is correct - Temporary passwords are not synced to Azure AD https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-password-hash-synchronization#one-object-is-not-synchronizing-passwords-manual-troubleshooting-steps

upvoted 2 times

Moji1

4 years, 8 months ago

This link is old, check this out: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization#synchronizing-temporary-passwords-and-force-password-change-on-next-logon

upvoted 1 times

...

Shades

4 years, 11 months ago

He may be prompted to change, but it will not work unless Password write back is enabled..Hence he will not be allowed to sign in

upvoted 2 times

...

Mike35

4 years, 12 months ago

It seems explanation explains the answer must be A.

upvoted 1 times

...