在azure广告连接同步工具中收到错误 [英] getting error in azure ad connect sync tool

问题描述

解决方案

您好  Jatin ， 

我相信你的内部网络中有代理因此AD连接设置无法访问Azure AD配置服务。要使AD连接正常运行，您需要在
网络中绕过代理身份验证中的以下两个URL。 

adminwebservice.microsoftonline.com

login.microsoftonline.com

我建议您使用powershell检查Azure AD同步服务器上与以下cmdlet的连接。 



Invoke-WebRequest -Uri https://adminwebservice.microsoftonline.com/ProvisioningService.svc



如果这给你一个状态码200意味着我们能够连接到云上的配置服务端点，这对AAD连接来说非常重要。在此之后，我建议您使用以下文章
设置AD连接机器，以便对代理连接进行故障排除。您可能需要更改一般位于系统上的machine.config文件，该文件位于C：\ Windows \ Microsoftoft.NET \Framework64 \v4.0.30319 \Config \machine.config本地，但位置可能会有所不同取决于
安装在基本操作系统上的.Net版本。  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-connectivity

<它讨论了Azure AD connect的代理设置。它必须在你的情况下帮助你。此外，生成的跟踪日志文件将包含更多信息。我们可以用[ERROR]字符串搜索它来查找错误，并且可以将所有尾随和之前的事件
相关联以得出结论。我建议您还检查AD连接安装的先决条件的连接部分。 

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-安装先决条件＃连接

希望上述信息可以帮助您进行故障排除。 



如果您有任何疑问，请告知我们。 

谢谢。 

解决方案

Hello Jatin, 

I believe you have a proxy within your internal network and hence the AD connect setup is unable to reach the Azure AD provisioning service. For AD connect to function properly you need to bypass the following two URLs from proxy authentication within your network. 

adminwebservice.microsoftonline.com
login.microsoftonline.com

I would suggest you to please check the connectivity with the following cmdlet on the Azure AD sync server using powershell. 

Invoke-WebRequest -Uri https://adminwebservice.microsoftonline.com/ProvisioningService.svc

If this gives you a status code 200 which means we are able to connect to provisioning service endpoint on the cloud which is a very important thing for AAD connect . After this I would suggest you to setup your AD connect machine using the following article for troubleshooting the proxy connectivity . You may need to make changes to the machine.config file generally located on the system locally at C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config however the location can vary depending upon the .Net version installed on the base OS. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-connectivity

It talks about the proxy setup for Azure AD connect . It must help you in your case. Also the Trace log file which is generated would have more information . We can search it with [ERROR] string to find the errors and all the trailing and previous events can be correlated to come to a conclusion. I suggest you to also check the Connectivity section of the pre-requisites for AD connect installation. 

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-prerequisites#connectivity

Hope the above information helps you in troubleshooting the same. 

Please let us know in case you have any further queries. 

Thank you. 

这篇关于在azure广告连接同步工具中收到错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！