Symptoms
The "Edit Service User" Office 365 APS task fails with the following output:
Application configuration script reported errors:
Method unlock_customer calling failed. Reason:The value for the parameter PreferredLanguage cannot be changed Method: SetUser
Cause
A customer may import users to MOP from its on-premise Active Directory. For such users most of the properties become read-only. See http://www.messageops.com/documentation/office-365-documentation/office-365-directory-synchronization-in-depth for details. In order to verify it one may log into MOP with the administrative privileges and check the users and groups menu. Imported users should have the Synced with Active Directory status.
Resolution
Since it is not possible to modify properties of such users, the task should be cancelled. Note that Odin does not recommend to use Microsoft Online Services Directory Synchronization to perform the synchronization between a customer's on-premise Active Directory and Microsoft Office 365. If a customer needs to perform this synchronization, the OA Customer Directory Integration module should be used instead. See http://download.pa.parallels.com/poa/Office365/doc/71528.htm for more details.
Since Office 365 2.5 the Subscription Disabling Behavior global setting is introduced. If a subscription with synced users should be disabled, make sure this property is set to Disable subscriptions, process tasks and roll back to the original value.