ADS Account update frozen

Hi Experts,

We have few frozen jobs  ADS_ADSAccount_Update/(De-)activate with below error,

Do we have any work around or root cause some where mentioned in our community?

ErrorMessages (2021-10-08 12:01:12.603) [1777018] Error executing synchronization project (Active Directory Domain (DC=**,DC=LOCAL))'s workflow (Provisioning).
[1777124] Error executing projection step (user) of projection configuration (Provisioning (Provisioning)).
[1777219] Error executing synchronization step (user)!
[1777004] Method (Update object (Update)) could not be executed successfully.
[System.Exception] Error committing object 906b130b-3873-4456-bbb8-c5e117b1b8dd.(Error: The server is unwilling to process the request.

Error 80072035 writing object was tolerated because the object is a system object and cannot be changed.
Error in COM access layer: number: 80072035, description: The server is unwilling to process the request.

Method Commit() was called on object CN=***\, Micheal,OU=************,OU=******,OU=*********,OU=******.Users,DC=******,DC=local.
Property vrtPrimaryGroupID is set.
Object not committed successfully. Retrying using single property commit.
The server is unwilling to process the request.

Error 80072035 writing object was tolerated because the object is a system object and cannot be changed.
Error in COM access layer: number: 80072035, description: The server is unwilling to process the request.

Method Commit() was called on object  CN=***\, Micheal,OU=************,OU=*******,OU=*********,OU=******.Users,DC=******,DC=local.
)

  • Common reasons for this Error (coming from AD) are (according to the internet):

    While creating/modifying an user, I get the following error "The server is unwilling to process the request - Error Code : 80072035"

     

    The possible reasons for this error could be:

    1. While setting the password, if the password complexity requirement as defined in the password policy is not met. For example, the password policy might state that the password should be alphanumeric and if the password specified do not comply this, you might get this error.

    2. When you try to remove a non-existing user object from a group.

    3. When your try to remove a user from his/her primary group.

    4. When modifying the SAMAccountName format for multiple users and when more than one user happen to have the same SAMAccountName.