The error 8344 insufficient access rights to perform the operation indicates that the Azure AD Connect service account does not have the required permissions to synchronize the Admin1 account. This could be because the Admin1 account is in an organizational unit (OU) that has security inheritance disabled, which prevents the service account from inheriting the necessary permissions from the parent OU. To resolve this issue, you should enable security inheritance in AD DS for the OU that contains the Admin1 account. This will allow the service account to synchronize the Admin1 account to Azure AD. Alternatively, you could also grant the service account explicit permissions on the Admin1 account, but this would be more tedious and less scalable than enabling security inheritance.

Topic 1, Fabrikam Inc.
VM3
Users report issues connecting from VM3 to resources at Margie's Travel. The administrator for Margie's Travel has verified that their VPN gateway is working correctly. You must verify whether the Fabrikam virtual network gateway is available.
VM10
All ping tests bust be performed by using the ICMP protocol. You are unable to ping VM10 from VM1 Alpine Ski House You discover during testing that scheduling agents are experiencing latency when accessing resources at the Alpine Ski House. You suspect that the issue is related to ICMP latency.
Contoso Suites
You receive reports that VM1 is unable to access resources at Contoso Suites Blue Yonder Airlines The administrator of a partner company named Blue Yonder Airlines reports VPN disconnections and IPsec failure to connect errors.
Other resource issues
* MFA requests on SRV2 are failing with a security token error.
* You are unable to ping VM10 from VM1.
Admin1
You receive the following error on SRV1 only when trying to synchronize an administrator named Admin1: 8344 insufficient access rights to perform the operation Admin2 An administrator named Admin2 reports they cannot connect to the web server public IP address on VM4 from VM2.
Agent 1
A scheduling agent named Agent1 reports issues authenticating to Azure AD.
Used 1
A scheduling agent named User1 reports that they can access the internet when connected to the point-to-site VPN.
User2
A user named User2 reports the following error when registering for SSPR: Your administrator has not enabled you to use this feature.
Sales team
Sales team employees report that they are unable to connect by using point-to-site VPN.