Skip to content

Commit 0b7c05d

Browse files
committed
acroninx fixes
1 parent 05eb804 commit 0b7c05d

File tree

2 files changed

+18
-18
lines changed

2 files changed

+18
-18
lines changed

articles/active-directory-domain-services/troubleshoot-alerts.md

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ ms.author: justinha
1616
---
1717
# Known issues: Common alerts and resolutions in Microsoft Entra Domain Services
1818

19-
As a central part of identity and authentication for applications, Microsoft Entra Domain Services sometimes has problems. If you run into issues, there are some common alerts and associated troubleshooting steps to help you get things running again. At any time, you can also [open an Azure support request][azure-support] for additional troubleshooting assistance.
19+
As a central part of identity and authentication for applications, Microsoft Entra Domain Services sometimes has problems. If you run into issues, there are some common alerts and associated troubleshooting steps to help you get things running again. At any time, you can also [open an Azure support request][azure-support] for more troubleshooting help.
2020

2121
This article provides troubleshooting information for common alerts in Domain Services.
2222

@@ -30,7 +30,7 @@ This article provides troubleshooting information for common alerts in Domain Se
3030

3131
This error is usually caused when an Azure subscription is moved to a new Microsoft Entra directory and the old Microsoft Entra directory that's associated with Domain Services is deleted.
3232

33-
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it in your new directory. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
33+
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it in your new directory. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for more troubleshooting help.
3434

3535
## AADDS101: Azure AD B2C is running in this directory
3636

@@ -70,9 +70,9 @@ To resolve this alert, delete your existing managed domain and recreate it in a
7070
1. [Delete the managed domain](delete-aadds.md) from your directory.
7171
1. To update the virtual network IP address range, search for and select *Virtual network* in the Microsoft Entra admin center. Select the virtual network for Domain Services that incorrectly has a public IP address range set.
7272
1. Under **Settings**, select *Address Space*.
73-
1. Update the address range by choosing the existing address range and editing it, or adding an additional address range. Make sure the new IP address range is in a private IP range. When ready, **Save** the changes.
73+
1. Update the address range by choosing the existing address range and editing it, or by adding an address range. Make sure the new IP address range is in a private IP range. When ready, **Save** the changes.
7474
1. Select **Subnets** in the left-hand navigation.
75-
1. Choose the subnet you wish to edit, or create an additional subnet.
75+
1. Choose the subnet you wish to edit, or create another subnet.
7676
1. Update or specify a private IP address range then **Save** your changes.
7777
1. [Create a replacement managed domain](tutorial-create-instance.md). Make sure you pick the updated virtual network subnet with a private IP address range.
7878

@@ -125,7 +125,7 @@ Domain Services requires an active subscription, and can't be moved to a differe
125125

126126
### Resolution
127127

128-
Domain Services creates additional resources to function properly, such as public IP addresses, virtual network interfaces, and a load balancer. If any of these resources are deleted, the managed domain is in an unsupported state and prevents the domain from being managed. For more information on these resources, see [Network resources used by Domain Services](network-considerations.md#network-resources-used-by-azure-ad-ds).
128+
Domain Services creates resources to function properly, such as public IP addresses, virtual network interfaces, and a load balancer. If any of these resources are deleted, the managed domain is in an unsupported state and prevents the domain from being managed. For more information on these resources, see [Network resources used by Domain Services](network-considerations.md#network-resources-used-by-azure-ad-ds).
129129

130130
This alert is generated when one of these required resources is deleted. If the resource was deleted less than 4 hours ago, there's a chance that the Azure platform can automatically recreate the deleted resource. The following steps outline how to check the health status and timestamp for resource deletion:
131131

@@ -145,9 +145,9 @@ This alert is generated when one of these required resources is deleted. If the
145145

146146
### Resolution
147147

148-
The virtual network subnet for Domain Services needs sufficient IP addresses for the automatically created resources. This IP address space includes the need to create replacement resources if there's a maintenance event. To minimize the risk of running out of available IP addresses, don't deploy additional resources, such as your own VMs, into the same virtual network subnet as the managed domain.
148+
The virtual network subnet for Domain Services needs sufficient IP addresses for the automatically created resources. This IP address space includes the need to create replacement resources if there's a maintenance event. To minimize the risk of running out of available IP addresses, don't deploy other resources, such as your own VMs, into the same virtual network subnet as the managed domain.
149149

150-
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
150+
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for more help.
151151

152152
## AADDS111: Service principal unauthorized
153153

@@ -170,16 +170,16 @@ Some automatically generated service principals are used to manage and create re
170170

171171
### Resolution
172172

173-
The virtual network subnet for Domain Services needs enough IP addresses for the automatically created resources. This IP address space includes the need to create replacement resources if there's a maintenance event. To minimize the risk of running out of available IP addresses, don't deploy additional resources, such as your own VMs, into the same virtual network subnet as the managed domain.
173+
The virtual network subnet for Domain Services needs enough IP addresses for the automatically created resources. This IP address space includes the need to create replacement resources if there's a maintenance event. To minimize the risk of running out of available IP addresses, don't deploy other resources, such as your own VMs, into the same virtual network subnet as the managed domain.
174174

175175
To resolve this alert, delete your existing managed domain and re-create it in a virtual network with a large enough IP address range. This process is disruptive as the managed domain is unavailable and any custom resources you've created like OUs or service accounts are lost.
176176

177177
1. [Delete the managed domain](delete-aadds.md) from your directory.
178178
1. To update the virtual network IP address range, search for and select *Virtual network* in the Microsoft Entra admin center. Select the virtual network for the managed domain that has the small IP address range.
179179
1. Under **Settings**, select *Address Space*.
180-
1. Update the address range by choosing the existing address range and editing it, or adding an additional address range. Make sure the new IP address range is large enough for the managed domain's subnet range. When ready, **Save** the changes.
180+
1. Update the address range by choosing the existing address range and editing it, or by adding another address range. Make sure the new IP address range is large enough for the managed domain's subnet range. When ready, **Save** the changes.
181181
1. Select **Subnets** in the left-hand navigation.
182-
1. Choose the subnet you wish to edit, or create an additional subnet.
182+
1. Choose the subnet you wish to edit, or create another subnet.
183183
1. Update or specify a large enough IP address range then **Save** your changes.
184184
1. [Create a replacement managed domain](tutorial-create-instance.md). Make sure you pick the updated virtual network subnet with a large enough IP address range.
185185

@@ -193,7 +193,7 @@ The managed domain's health automatically updates itself within two hours and re
193193

194194
### Resolution
195195

196-
Domain Services creates additional resources to function properly, such as public IP addresses, virtual network interfaces, and a load balancer. If any of these resources are modified, the managed domain is in an unsupported state and can't be managed. For more information about these resources, see [Network resources used by Domain Services](network-considerations.md#network-resources-used-by-azure-ad-ds).
196+
Domain Services creates resources to function properly, such as public IP addresses, virtual network interfaces, and a load balancer. If any of these resources are modified, the managed domain is in an unsupported state and can't be managed. For more information about these resources, see [Network resources used by Domain Services](network-considerations.md#network-resources-used-by-azure-ad-ds).
197197

198198
This alert is generated when one of these required resources is modified and can't automatically be recovered by Domain Services. To resolve the alert, [open an Azure support request][azure-support] to fix the instance.
199199

@@ -205,7 +205,7 @@ This alert is generated when one of these required resources is modified and can
205205

206206
### Resolution
207207

208-
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
208+
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for more help.
209209

210210
## AADDS115: Resources are locked
211211

@@ -329,7 +329,7 @@ When the managed domain is enabled again, the managed domain's health automatica
329329

330330
## Next steps
331331

332-
If you still have issues, [open an Azure support request][azure-support] for additional troubleshooting assistance.
332+
If you still have issues, [open an Azure support request][azure-support] for more troubleshooting help.
333333

334334
<!-- INTERNAL LINKS -->
335335
[azure-support]: ../active-directory/fundamentals/active-directory-troubleshooting-support-howto.md

articles/active-directory-domain-services/troubleshoot.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ ms.author: justinha
1616
---
1717
# Common errors and troubleshooting steps for Microsoft Entra Domain Services
1818

19-
As a central part of identity and authentication for applications, Microsoft Entra Domain Services sometimes has problems. If you run into issues, there are some common error messages and associated troubleshooting steps to help you get things running again. At any time, you can also [open an Azure support request][azure-support] for additional troubleshooting assistance.
19+
As a central part of identity and authentication for applications, Microsoft Entra Domain Services sometimes has problems. If you run into issues, there are some common error messages and associated troubleshooting steps to help you get things running again. At any time, you can also [open an Azure support request][azure-support] for more troubleshooting help.
2020

2121
This article provides troubleshooting steps for common issues in Domain Services.
2222

@@ -29,7 +29,7 @@ If you have problems enabling Domain Services, review the following common error
2929
| **Sample error Message** | **Resolution** |
3030
| --- |:--- |
3131
| *The name aaddscontoso.com is already in use on this network. Specify a name that is not in use.* |[Domain name conflict in the virtual network](troubleshoot.md#domain-name-conflict) |
32-
| *Domain Services could not be enabled in this Microsoft Entra tenant. The service does not have adequate permissions to the application called 'Microsoft Entra Domain Services Sync'. Delete the application called 'Microsoft Entra Domain Services Sync' and then try to enable Domain Services for your Microsoft Entra tenant.* |[Domain Services doesn't have adequate permissions to the Microsoft Entra Domain Services Sync application](troubleshoot.md#inadequate-permissions) |
32+
| *Domain Services could not be enabled in this Microsoft Entra tenant. The service does not have adequate permissions to the application called Microsoft Entra Domain Services Sync. Delete the application called 'Microsoft Entra Domain Services Sync' and then try to enable Domain Services for your Microsoft Entra tenant.* |[Domain Services doesn't have adequate permissions to the Microsoft Entra Domain Services Sync application](troubleshoot.md#inadequate-permissions) |
3333
| *Domain Services could not be enabled in this Microsoft Entra tenant. The Domain Services application in your Microsoft Entra tenant does not have the required permissions to enable Domain Services. Delete the application with the application identifier d87dcbc6-a371-462e-88e3-28ad15ec4e64 and then try to enable Domain Services for your Microsoft Entra tenant.* |[The Domain Services application isn't configured properly in your Microsoft Entra tenant](troubleshoot.md#invalid-configuration) |
3434
| *Domain Services could not be enabled in this Microsoft Entra tenant. The Microsoft Entra application is disabled in your Microsoft Entra tenant. Enable the application with the application identifier 00000002-0000-0000-c000-000000000000 and then try to enable Domain Services for your Microsoft Entra tenant.* |[The Microsoft Graph application is disabled in your Microsoft Entra tenant](troubleshoot.md#microsoft-graph-disabled) |
3535

@@ -43,13 +43,13 @@ If you have problems enabling Domain Services, review the following common error
4343

4444
Check that you don't have an existing AD DS environment with the same domain name on the same, or a peered, virtual network. For example, you may have an AD DS domain named *aaddscontoso.com* that runs on Azure VMs. When you try to enable a Domain Services managed domain with the same domain name of *aaddscontoso.com* on the virtual network, the requested operation fails.
4545

46-
This failure is due to name conflicts for the domain name on the virtual network. A DNS lookup checks if an existing AD DS environment responds on the requested domain name. To resolve this failure, use a different name to set up your managed domain, or de-provision the existing AD DS domain and then try again to enable Domain Services.
46+
This failure is due to name conflicts for the domain name on the virtual network. A DNS lookup checks if an existing AD DS environment responds on the requested domain name. To resolve this failure, use a different name to set up your managed domain, or deprovision the existing AD DS domain and then try again to enable Domain Services.
4747

4848
### Inadequate permissions
4949

5050
**Error message**
5151

52-
*Domain Services could not be enabled in this Microsoft Entra tenant. The service does not have adequate permissions to the application called 'Microsoft Entra Domain Services Sync'. Delete the application called 'Microsoft Entra Domain Services Sync' and then try to enable Domain Services for your Microsoft Entra tenant.*
52+
*Domain Services could not be enabled in this Microsoft Entra tenant. The service does not have adequate permissions to the application called Microsoft Entra Domain Services Sync. Delete the application called 'Microsoft Entra Domain Services Sync' and then try to enable Domain Services for your Microsoft Entra tenant.*
5353

5454
**Resolution**
5555

@@ -171,7 +171,7 @@ To fully remove a user account from a managed domain, delete the user permanentl
171171

172172
## Next steps
173173

174-
If you continue to have issues, [open an Azure support request][azure-support] for additional troubleshooting assistance.
174+
If you continue to have issues, [open an Azure support request][azure-support] for more troubleshooting help.
175175

176176
<!-- INTERNAL LINKS -->
177177
[cloud-only-passwords]: tutorial-create-instance.md#enable-user-accounts-for-azure-ad-ds

0 commit comments

Comments
 (0)