DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 2520976 - Last Review: September 19, 2014 - Revision: 26.0

On This Page

PROBLEM

When you run the Microsoft Azure Active Directory Sync tool to synchronize your on-premises directory to Azure Active Directory (Azure AD), you get the following error message in an email message that's sent by MSOnlineServicesTeam@MicrosoftOnline.com:
Error 012: Unable to update this object in Microsoft Online Services because the proxy address associated with this object in the local Active Directory is already associated with another object. Fix this in your local Active Directory.
Note Azure AD provides identity management and access control capabilities for cloud services such as Office 365, Microsoft Azure, and Windows Intune.

CAUSE

This issue occurs if one or more of the following conditions are true:
  • An object in the on-premises Active Directory has an SMTP address that's the same as the SMTP address of the object that's reporting the problem.
  • An object in the on-premises Active Directory has a mail attribute that's identical to the object that's reporting the problem.
  • An object already exists in Azure AD that has the same SMTP address or mail attribute as the object in the on-premises Active Directory.  

SOLUTION

To resolve this issue, use one of the following methods:

Method 1: Locate the object in the on-premises Active Directory


To locate on-premises Active Directory objects that use an SMTP address or mail attribute that's identical to the object that's reporting the problem, run an LDAP query in the on-premises Active Directory.

For example, if the problem proxy addresses is jsmith@contoso.com, the LDAP query will resemble the following:
(|(proxyAddresses=smtp:JSmith@contoso.com)(mail=JSmith@contoso.com))
This LDAP query looks for all objects in Active Directory that have a proxy address or mail attribute value that contains JSmith@contoso.com.

You can use a tool such as Active Directory Users and Computers to run an LDAP query. For more info about how to use such a tool, go to the following Microsoft TechNet website:
LDAP Query Basics (http://technet.microsoft.com/en-us/library/aa996205(EXCHG.65).aspx#DoingASearchUsingADUC)
If multiple results are returned, you can resolve the results so that only one object has the proxy address and mail attribute with the problem email address.

Method 2: Locate the object in Azure AD

If the object already exists in Azure AD and has the same SMTP address or mail attribute as the object in the on-premises directory, you can locate and then remove the conflicting object or email address from Azure AD.

MORE INFORMATION

By default, directory synchronization runs every 3 hours. To minimize the effect of the suggested fix on the affected user, you can force directory synchronization to run immediately. For more info about how to do this, go the following Microsoft website: 


Synchronize your directories (http://technet.microsoft.com/en-us/library/jj151771.aspx)
Still need help? Go to the Office 365 Community (http://community.office365.com/) website or the Azure Active Directory Forums (http://social.technet.microsoft.com/Forums/windowsazure/en-US/home?forum=windowsazureaditpro) website.

Applies to
  • Microsoft Azure Active Directory
  • Microsoft Office 365
  • Windows Intune
  • CRM Online via Office 365 E Plans
  • Microsoft Azure Recovery Services
  • Office 365 Identity Management
Keywords: 
o365 o365a o365e o365m o365022013 KB2520976
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support