Microsoft AZ-104 Exam - Topic 3 Question 143 Discussion

Microsoft's IdFix tool is purpose-built to scan an on-premises Active Directory in preparation for Azure AD/Microsoft Entra Connect synchronization, and it specifically detects attribute values -- including UPNs containing characters that are unsupported in Microsoft Entra ID (such as certain symbols or leading/trailing spaces) -- flagging them so an administrator can use IdFix's Edit action to correct them in bulk before the next sync cycle. Manually editing each UPN in Active Directory Users and Computers (option A) does not systematically find every affected account and is error-prone at scale. Modifying UPN suffixes in Active Directory Domains and Trusts (option C) changes which suffix is available, not the presence of unsupported characters. Modifying the Azure AD Connect outbound synchronization rule (option D) changes what is synced, not the erroneous source data, and directory-sync customization is a much heavier-handed, unsupported-by-default approach. IdFix remains Microsoft's current, recommended pre-sync remediation tool. Option B is correct and unchanged.

Official Reference

IdFix tool overview --- https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-fix-default-culture