{"id":15624,"date":"2026-03-27T09:02:05","date_gmt":"2026-03-27T00:02:05","guid":{"rendered":"https:\/\/m365jp.net\/?p=15624"},"modified":"2026-03-27T09:06:32","modified_gmt":"2026-03-27T00:06:32","slug":"mc1262584-upcoming-change-microsoft-entra-connect-security-update-to-block-hard-match-for-users-with-microsoft-entra-roles","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-03-27-mc1262584-upcoming-change-microsoft-entra-connect-security-update-to-block-hard-match-for-users-with-microsoft-entra-roles","title":{"rendered":"MC1262584 | Upcoming change \u2013 Microsoft Entra Connect security update to block hard match for users with Microsoft Entra roles"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1262584 | Upcoming change \u2013 Microsoft Entra Connect security update to block hard match for users with Microsoft Entra roles<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n03\/26\/2026 23:43:18<\/td>\n<\/tr>\n
Start Time<\/th>\n03\/26\/2026 23:39:47<\/td>\n<\/tr>\n
End Time<\/th>\n08\/02\/2026 07:00:00<\/td>\n<\/tr>\n
Action Required By Date<\/th>\n2026-05-31T07:00:00Z<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

[Introduction]<\/b><\/p>\n

We\u2019re introducing a security update<\/b> to Microsoft Entra Connect and Cloud Sync<\/b> to better protect privileged cloud\u2011managed accounts. Today, when Entra Connect or Cloud Sync adds new objects from Active Directory<\/b>, the service attempts a \u201chard match\u201d<\/b> by comparing the object\u2019s sourceAnchor<\/b> to the onPremisesImmutableId <\/b>of existing cloud accounts. If there\u2019s a match, the service takes over the source of authority (SoA) and updates the cloud object using the attributes from Active Directory.<\/p>\n

Beginning in early June 2026, Microsoft Entra ID will block hard\u2011match attempts that target cloud\u2011managed users who hold Microsoft Entra roles. This change helps prevent attackers from taking over privileged accounts by manipulating on\u2011premises attributes.<\/p>\n

[When this will happen]<\/b><\/p>\n

General Availability (Worldwide, DoD, GCC, and GCCH): <\/b>We will begin rolling out in early June 2026<\/b> and expect to complete by early July 2026<\/b>. <\/p>\n

[How this affects your organization]<\/b><\/p>\n

Who is affected<\/i><\/p>\n