Your company has an on-premises Active Directory domain and a new Microsoft 365 E5 subscription. You plan to sync on-premises Active Directory objects to Microsoft Entra. You need to identify which user accounts will cause synchronization errors. What should you use? and why explain