This isn't really an Intune question. You'd be better posting this in the Azure Forum.

Have you prepared your AD to allow password write-back?

https://msdn.microsoft.com/en-us/library/azure/dn903642.aspx

http://www.c7solutions.com/2015/07/configuring-writeback-permissions-in-active-directory-for-azure-active-directory-sync

Hi,

I'am a bit confused about the subject.

My Configuration is the following:

We use ADFS on-premises

We integrated with SCCM2012R2

With the Azure AD Sync Tool I tried both Password Sync/ Password write back on as well as off.

We succesfully deployed to multiple iPhones.

One thing isn't working and that is:

When using the Company Portal app on IOS a user wants to change its password (its AD user account).

But this is not allowed according to screen that appears.

This is the first I've seen this. I'm gonna try this.

I'll be back

Thanks

Be careful with editing AD permissions. Do a test first.

Just to reiterate what Gerry said, Intune has *nothing* to do with user's AD/AzureAD accounts and their passwords and thus the Company Portal has no ability to allow them to reset it. Those features are part of AzureAD.

Hi,

It seems that I'm getting an error when I enable Password Write Bac in the Sync Tool.

I am getting error:

Log Name:      Application
Source:        ADSync
Date:          30-7-2015 09:37:44
Event ID:      6800
Task Category: MA Extension
Level:         Error
Keywords:      Classic
User:          N/A
Computer:     
Description:
The password management extension encountered an error.
 The stack trace is:
 
 "Object reference not set to an instance of an object.

   at Microsoft.CredentialManagement.OnPremisesPasswordReset.PasswordResetServiceManager.StopPasswordResetService()
   at AADPasswordReset.AADPasswordResetExtension.StopPasswordResetService(AADPasswordResetExtension* , _GUID managementAgentGuid)

InnerException=>
none
"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ADSync" />
    <EventID Qualifiers="49152">6800</EventID>
    <Level>2</Level>
    <Task>7</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-07-30T07:37:44.000000000Z" />
    <EventRecordID>228719</EventRecordID>
    <Channel>Application</Channel>
    <Computer>ZWS-TLB-SCCM02.zwijsen.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Object reference not set to an instance of an object.

   at Microsoft.CredentialManagement.OnPremisesPasswordReset.PasswordResetServiceManager.StopPasswordResetService()
   at AADPasswordReset.AADPasswordResetExtension.StopPasswordResetService(AADPasswordResetExtension* , _GUID managementAgentGuid)

InnerException=&gt;
none
</Data>
  </EventData>
</Event>