Why do the logs show "invalid password" when Provisioning/Syncing G Suite accounts?Answer:
This error is likely due to a mismatch of password policies between Active Directory (set in Group Policy Management Editor) and G Suite. For example: IF AD requires a 6 minimum character password, but G Suite requires 8. In this case, a user could have a valid 6 or 7 character AD password, but the password will fail to sync to G Suite with the error "Invalid password" as it does not meet the G Suite length requirement.To view the AD password Policy:
1. Open Group Policy Management Editor
2. Locate the policy used for Password Rules (Generally Default Domain Policy)
3. Look in Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Account Policies -> Password PolicyTo view the G Suite Password Policy:
To resolve, make sure that the Active Directory password requirements are equal to or exceed the length/complexity requirements for G Suite.