Directory synchronization fails for AD groups exceeding 10,000 members

Microsoft lists this known issue for 1 Windows version; its status is Resolved KB5068861. It started with KB5065426. Microsoft resolved it in KB5068861.

Resolved KB50688611 version

Facts

Microsoft id
3692
Status
Resolved KB5068861
Products
Windows Server 2025
Versions
Windows Server 2025
Originating KBs
KB5065426
Resolved by
KB5068861
First captured by us
(from our first import of this list)
Microsoft last modified
Source
Windows known issues · open the original at Microsoft

Status per Windows version

VersionStatusOriginating updateOpenedResolved
Windows Server 2025Resolved KB5068861OS Build 26100.6584, KB5065426, 2025-09-092025-10-15 00:49 UTC2025-11-11 18:00 UTC

Microsoft says

Applications that use the Active Directory directory synchronization (DirSync) control for on-premises Active Directory Domain Services (AD DS), such as when using Microsoft Entra Connect…

Windows known issues,

Read Microsoft's full post

What Microsoft changed

One version so far. If Microsoft edits it, each change shows here with what was removed and added.

  1. First version we captured ·

    As first seen: Resolved KB5068861
    Status
    Resolved KB5068861

    Seen by us · Microsoft's timestamp · Microsoft's page

Mentioning the same Microsoft ids

Last updated