You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-domain-services/troubleshoot-alerts.md
+13-13Lines changed: 13 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,7 +16,7 @@ ms.author: justinha
16
16
---
17
17
# Known issues: Common alerts and resolutions in Microsoft Entra Domain Services
18
18
19
-
As a central part of identity and authentication for applications, Microsoft Entra Domain Services sometimes has problems. If you run into issues, there are some common alerts and associated troubleshooting steps to help you get things running again. At any time, you can also [open an Azure support request][azure-support] for additional troubleshooting assistance.
19
+
As a central part of identity and authentication for applications, Microsoft Entra Domain Services sometimes has problems. If you run into issues, there are some common alerts and associated troubleshooting steps to help you get things running again. At any time, you can also [open an Azure support request][azure-support] for more troubleshooting help.
20
20
21
21
This article provides troubleshooting information for common alerts in Domain Services.
22
22
@@ -30,7 +30,7 @@ This article provides troubleshooting information for common alerts in Domain Se
30
30
31
31
This error is usually caused when an Azure subscription is moved to a new Microsoft Entra directory and the old Microsoft Entra directory that's associated with Domain Services is deleted.
32
32
33
-
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it in your new directory. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
33
+
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it in your new directory. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for more troubleshooting help.
34
34
35
35
## AADDS101: Azure AD B2C is running in this directory
36
36
@@ -70,9 +70,9 @@ To resolve this alert, delete your existing managed domain and recreate it in a
70
70
1.[Delete the managed domain](delete-aadds.md) from your directory.
71
71
1. To update the virtual network IP address range, search for and select *Virtual network* in the Microsoft Entra admin center. Select the virtual network for Domain Services that incorrectly has a public IP address range set.
72
72
1. Under **Settings**, select *Address Space*.
73
-
1. Update the address range by choosing the existing address range and editing it, or adding an additional address range. Make sure the new IP address range is in a private IP range. When ready, **Save** the changes.
73
+
1. Update the address range by choosing the existing address range and editing it, or by adding an address range. Make sure the new IP address range is in a private IP range. When ready, **Save** the changes.
74
74
1. Select **Subnets** in the left-hand navigation.
75
-
1. Choose the subnet you wish to edit, or create an additional subnet.
75
+
1. Choose the subnet you wish to edit, or create another subnet.
76
76
1. Update or specify a private IP address range then **Save** your changes.
77
77
1.[Create a replacement managed domain](tutorial-create-instance.md). Make sure you pick the updated virtual network subnet with a private IP address range.
78
78
@@ -125,7 +125,7 @@ Domain Services requires an active subscription, and can't be moved to a differe
125
125
126
126
### Resolution
127
127
128
-
Domain Services creates additional resources to function properly, such as public IP addresses, virtual network interfaces, and a load balancer. If any of these resources are deleted, the managed domain is in an unsupported state and prevents the domain from being managed. For more information on these resources, see [Network resources used by Domain Services](network-considerations.md#network-resources-used-by-azure-ad-ds).
128
+
Domain Services creates resources to function properly, such as public IP addresses, virtual network interfaces, and a load balancer. If any of these resources are deleted, the managed domain is in an unsupported state and prevents the domain from being managed. For more information on these resources, see [Network resources used by Domain Services](network-considerations.md#network-resources-used-by-azure-ad-ds).
129
129
130
130
This alert is generated when one of these required resources is deleted. If the resource was deleted less than 4 hours ago, there's a chance that the Azure platform can automatically recreate the deleted resource. The following steps outline how to check the health status and timestamp for resource deletion:
131
131
@@ -145,9 +145,9 @@ This alert is generated when one of these required resources is deleted. If the
145
145
146
146
### Resolution
147
147
148
-
The virtual network subnet for Domain Services needs sufficient IP addresses for the automatically created resources. This IP address space includes the need to create replacement resources if there's a maintenance event. To minimize the risk of running out of available IP addresses, don't deploy additional resources, such as your own VMs, into the same virtual network subnet as the managed domain.
148
+
The virtual network subnet for Domain Services needs sufficient IP addresses for the automatically created resources. This IP address space includes the need to create replacement resources if there's a maintenance event. To minimize the risk of running out of available IP addresses, don't deploy other resources, such as your own VMs, into the same virtual network subnet as the managed domain.
149
149
150
-
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
150
+
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for more help.
151
151
152
152
## AADDS111: Service principal unauthorized
153
153
@@ -170,16 +170,16 @@ Some automatically generated service principals are used to manage and create re
170
170
171
171
### Resolution
172
172
173
-
The virtual network subnet for Domain Services needs enough IP addresses for the automatically created resources. This IP address space includes the need to create replacement resources if there's a maintenance event. To minimize the risk of running out of available IP addresses, don't deploy additional resources, such as your own VMs, into the same virtual network subnet as the managed domain.
173
+
The virtual network subnet for Domain Services needs enough IP addresses for the automatically created resources. This IP address space includes the need to create replacement resources if there's a maintenance event. To minimize the risk of running out of available IP addresses, don't deploy other resources, such as your own VMs, into the same virtual network subnet as the managed domain.
174
174
175
175
To resolve this alert, delete your existing managed domain and re-create it in a virtual network with a large enough IP address range. This process is disruptive as the managed domain is unavailable and any custom resources you've created like OUs or service accounts are lost.
176
176
177
177
1.[Delete the managed domain](delete-aadds.md) from your directory.
178
178
1. To update the virtual network IP address range, search for and select *Virtual network* in the Microsoft Entra admin center. Select the virtual network for the managed domain that has the small IP address range.
179
179
1. Under **Settings**, select *Address Space*.
180
-
1. Update the address range by choosing the existing address range and editing it, or adding an additional address range. Make sure the new IP address range is large enough for the managed domain's subnet range. When ready, **Save** the changes.
180
+
1. Update the address range by choosing the existing address range and editing it, or by adding another address range. Make sure the new IP address range is large enough for the managed domain's subnet range. When ready, **Save** the changes.
181
181
1. Select **Subnets** in the left-hand navigation.
182
-
1. Choose the subnet you wish to edit, or create an additional subnet.
182
+
1. Choose the subnet you wish to edit, or create another subnet.
183
183
1. Update or specify a large enough IP address range then **Save** your changes.
184
184
1.[Create a replacement managed domain](tutorial-create-instance.md). Make sure you pick the updated virtual network subnet with a large enough IP address range.
185
185
@@ -193,7 +193,7 @@ The managed domain's health automatically updates itself within two hours and re
193
193
194
194
### Resolution
195
195
196
-
Domain Services creates additional resources to function properly, such as public IP addresses, virtual network interfaces, and a load balancer. If any of these resources are modified, the managed domain is in an unsupported state and can't be managed. For more information about these resources, see [Network resources used by Domain Services](network-considerations.md#network-resources-used-by-azure-ad-ds).
196
+
Domain Services creates resources to function properly, such as public IP addresses, virtual network interfaces, and a load balancer. If any of these resources are modified, the managed domain is in an unsupported state and can't be managed. For more information about these resources, see [Network resources used by Domain Services](network-considerations.md#network-resources-used-by-azure-ad-ds).
197
197
198
198
This alert is generated when one of these required resources is modified and can't automatically be recovered by Domain Services. To resolve the alert, [open an Azure support request][azure-support] to fix the instance.
199
199
@@ -205,7 +205,7 @@ This alert is generated when one of these required resources is modified and can
205
205
206
206
### Resolution
207
207
208
-
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
208
+
This error is unrecoverable. To resolve the alert, [delete your existing managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the managed domain, [open an Azure support request][azure-support] for more help.
209
209
210
210
## AADDS115: Resources are locked
211
211
@@ -329,7 +329,7 @@ When the managed domain is enabled again, the managed domain's health automatica
329
329
330
330
## Next steps
331
331
332
-
If you still have issues, [open an Azure support request][azure-support] for additional troubleshooting assistance.
332
+
If you still have issues, [open an Azure support request][azure-support] for more troubleshooting help.
Copy file name to clipboardExpand all lines: articles/active-directory-domain-services/troubleshoot.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,7 +16,7 @@ ms.author: justinha
16
16
---
17
17
# Common errors and troubleshooting steps for Microsoft Entra Domain Services
18
18
19
-
As a central part of identity and authentication for applications, Microsoft Entra Domain Services sometimes has problems. If you run into issues, there are some common error messages and associated troubleshooting steps to help you get things running again. At any time, you can also [open an Azure support request][azure-support] for additional troubleshooting assistance.
19
+
As a central part of identity and authentication for applications, Microsoft Entra Domain Services sometimes has problems. If you run into issues, there are some common error messages and associated troubleshooting steps to help you get things running again. At any time, you can also [open an Azure support request][azure-support] for more troubleshooting help.
20
20
21
21
This article provides troubleshooting steps for common issues in Domain Services.
22
22
@@ -29,7 +29,7 @@ If you have problems enabling Domain Services, review the following common error
29
29
|**Sample error Message**|**Resolution**|
30
30
| --- |:--- |
31
31
|*The name aaddscontoso.com is already in use on this network. Specify a name that is not in use.*|[Domain name conflict in the virtual network](troubleshoot.md#domain-name-conflict)|
32
-
|*Domain Services could not be enabled in this Microsoft Entra tenant. The service does not have adequate permissions to the application called 'Microsoft Entra Domain Services Sync'. Delete the application called 'Microsoft Entra Domain Services Sync' and then try to enable Domain Services for your Microsoft Entra tenant.*|[Domain Services doesn't have adequate permissions to the Microsoft Entra Domain Services Sync application](troubleshoot.md#inadequate-permissions)|
32
+
|*Domain Services could not be enabled in this Microsoft Entra tenant. The service does not have adequate permissions to the application called Microsoft Entra Domain Services Sync. Delete the application called 'Microsoft Entra Domain Services Sync' and then try to enable Domain Services for your Microsoft Entra tenant.*|[Domain Services doesn't have adequate permissions to the Microsoft Entra Domain Services Sync application](troubleshoot.md#inadequate-permissions)|
33
33
|*Domain Services could not be enabled in this Microsoft Entra tenant. The Domain Services application in your Microsoft Entra tenant does not have the required permissions to enable Domain Services. Delete the application with the application identifier d87dcbc6-a371-462e-88e3-28ad15ec4e64 and then try to enable Domain Services for your Microsoft Entra tenant.*|[The Domain Services application isn't configured properly in your Microsoft Entra tenant](troubleshoot.md#invalid-configuration)|
34
34
|*Domain Services could not be enabled in this Microsoft Entra tenant. The Microsoft Entra application is disabled in your Microsoft Entra tenant. Enable the application with the application identifier 00000002-0000-0000-c000-000000000000 and then try to enable Domain Services for your Microsoft Entra tenant.*|[The Microsoft Graph application is disabled in your Microsoft Entra tenant](troubleshoot.md#microsoft-graph-disabled)|
35
35
@@ -43,13 +43,13 @@ If you have problems enabling Domain Services, review the following common error
43
43
44
44
Check that you don't have an existing AD DS environment with the same domain name on the same, or a peered, virtual network. For example, you may have an AD DS domain named *aaddscontoso.com* that runs on Azure VMs. When you try to enable a Domain Services managed domain with the same domain name of *aaddscontoso.com* on the virtual network, the requested operation fails.
45
45
46
-
This failure is due to name conflicts for the domain name on the virtual network. A DNS lookup checks if an existing AD DS environment responds on the requested domain name. To resolve this failure, use a different name to set up your managed domain, or de-provision the existing AD DS domain and then try again to enable Domain Services.
46
+
This failure is due to name conflicts for the domain name on the virtual network. A DNS lookup checks if an existing AD DS environment responds on the requested domain name. To resolve this failure, use a different name to set up your managed domain, or deprovision the existing AD DS domain and then try again to enable Domain Services.
47
47
48
48
### Inadequate permissions
49
49
50
50
**Error message**
51
51
52
-
*Domain Services could not be enabled in this Microsoft Entra tenant. The service does not have adequate permissions to the application called 'Microsoft Entra Domain Services Sync'. Delete the application called 'Microsoft Entra Domain Services Sync' and then try to enable Domain Services for your Microsoft Entra tenant.*
52
+
*Domain Services could not be enabled in this Microsoft Entra tenant. The service does not have adequate permissions to the application called Microsoft Entra Domain Services Sync. Delete the application called 'Microsoft Entra Domain Services Sync' and then try to enable Domain Services for your Microsoft Entra tenant.*
53
53
54
54
**Resolution**
55
55
@@ -171,7 +171,7 @@ To fully remove a user account from a managed domain, delete the user permanentl
171
171
172
172
## Next steps
173
173
174
-
If you continue to have issues, [open an Azure support request][azure-support] for additional troubleshooting assistance.
174
+
If you continue to have issues, [open an Azure support request][azure-support] for more troubleshooting help.
0 commit comments