Hybrid AD having trouble with a User who is showing locked out in Azure but not on the local domain.

Dear Joe,

Based on your description, the password reset on your local Domain Controller (DC) was successful, but the user is unable to log in to Microsoft 365, and the account appears locked in the cloud despite showing active in your local AD.

I recommend to:

1. Verify Azure AD Sync Status Open the Azure AD Connect tool and confirm that the last sync was successful. You can also run: Code Start-ADSyncSyncCycle -PolicyType Delta in PowerShell to manually trigger a sync.
2. Check Microsoft 365 Account Status Sign in to the Microsoft 365 Admin Center. Navigate to Users > Active Users, locate the affected account, and check for any lockout or sign-in issues.
3. Unlock the Account (if applicable) If the account is locked in Microsoft 365, you can manually unlock it or wait for the lockout duration to expire.
4. Confirm Password Sync Ensure that password writeback is enabled in Azure AD Connect if you're using hybrid identity.

If this guidance proves helpful, feel free to click “Accept Answer” so we know we’re heading in the right direction 😊. And of course, I’m here if you need further clarification or support.

T&B, Harry.