You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-domain-services/troubleshoot-alerts.md
+13-11Lines changed: 13 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,7 +16,9 @@ ms.author: iainfou
16
16
---
17
17
# Known issues: Common alerts and resolutions in Azure Active Directory Domain Services
18
18
19
-
This article provides troubleshooting information and resolutions for common alerts in an Azure AD DS managed domain.
19
+
As a central part of identity and authentication for applications, Azure Active Directory Domain Services (Azure AD DS) sometimes has problems. If you run into issues, there are some common alerts and associated troubleshooting steps to help you get things running again. At any time, you can also [open an Azure support request][azure-support] for additional troubleshooting assistance.
20
+
21
+
This article provides troubleshooting information for common alerts in Azure AD DS.
20
22
21
23
## AADDS100: Missing directory
22
24
@@ -98,7 +100,7 @@ Azure AD DS requires an active subscription, and can't be moved to a different s
98
100
99
101
### Resolution
100
102
101
-
Azure AD DS requires an active subscription. If the Azure subscription that the Azure AD DS managed domain was associated with isn't active, you must renew it to reactive the subscription.
103
+
Azure AD DS requires an active subscription. If the Azure subscription that the Azure AD DS managed domain was associated with isn't active, you must renew it to reactivate the subscription.
102
104
103
105
1.[Renew your Azure subscription](https://docs.microsoft.com/azure/billing/billing-subscription-become-disable).
104
106
2. Once the subscription is renewed, an Azure AD DS notification lets you re-enable the managed domain.
@@ -123,7 +125,7 @@ Azure AD DS requires an active subscription, and can't be moved to a different s
123
125
124
126
### Resolution
125
127
126
-
Azure AD DS creates specific resources to function properly, such as public IP addresses, NICs, and a load balancer. If any of these resources are deleted, the managed domain is in an unsupported state and prevents the domain from being managed. For more information on these resources, see [Network resources used by Azure AD DS](network-considerations.md#network-resources-used-by-azuread-ds).
128
+
Azure AD DS creates specific resources to function properly, such as public IP addresses, NICs, and a load balancer. If any of these resources are deleted, the managed domain is in an unsupported state and prevents the domain from being managed. For more information on these resources, see [Network resources used by Azure AD DS](network-considerations.md#network-resources-used-by-azure-ad-ds).
127
129
128
130
This alert is generated when one of these required resources is deleted. If the resource was deleted less than 4 hours ago, there is a chance that the Azure platform can automatically recreate the deleted resource. The following steps outline how to check the health status and timestamp for resource deletion:
129
131
@@ -144,7 +146,7 @@ This alert is generated when one of these required resources is deleted. If the
144
146
145
147
The virtual network subnet for Azure AD DS needs sufficient IP addresses for the automatically created resources. This IP address space includes the need to create replacement resources if there's a maintenance event. To minimize the risk of running out of available IP addresses, don't deploy additional resources, such as your own VMs, into the same virtual network subnet as Azure AD DS.
146
148
147
-
This error is unrecoverable. To resolve the alert, [delete your existing Azure AD DS managed domain](delete-aadds.md) and recreate it in your new directory. If you have trouble deleting the Azure AD DS managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
149
+
This error is unrecoverable. To resolve the alert, [delete your existing Azure AD DS managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the Azure AD DS managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
148
150
149
151
## AADDS111: Service principal unauthorized
150
152
@@ -172,7 +174,7 @@ The virtual network subnet for Azure AD DS needs sufficient IP addresses for the
172
174
To resolve this alert, delete your existing Azure AD DS managed domain and re-create it in a virtual network with a large enough IP address range. This process is disruptive as the Azure AD DS managed domain is unavailable and any custom resources you've created like OUs or service accounts are lost.
173
175
174
176
1.[Delete the Azure AD DS managed domain](delete-aadds.md) from your directory.
175
-
1. To update the virtual network IP address range, search for and select *Virtual network* in the Azure portal. Select the virtual network for Azure AD DS that incorrectly has a public IP address range set.
177
+
1. To update the virtual network IP address range, search for and select *Virtual network* in the Azure portal. Select the virtual network for Azure AD DS that the small IP address range.
176
178
1. Under **Settings**, select *Address Space*.
177
179
1. Update the address range by choosing the existing address range and editing it, or adding an additional address range. Make sure the new IP address range is large enough for the Azure AD DS subnet range. When ready, **Save** the changes.
178
180
1. Select **Subnets** in the left-hand navigation.
@@ -190,7 +192,7 @@ The Azure AD DS managed domain's health automatically updates itself within two
190
192
191
193
### Resolution
192
194
193
-
This error is unrecoverable. To resolve the alert, [delete your existing Azure AD DS managed domain](delete-aadds.md) and recreate it in your new directory. If you have trouble deleting the Azure AD DS managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
195
+
This error is unrecoverable. To resolve the alert, [delete your existing Azure AD DS managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the Azure AD DS managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
194
196
195
197
## AADDS114: Subnet invalid
196
198
@@ -200,7 +202,7 @@ This error is unrecoverable. To resolve the alert, [delete your existing Azure A
200
202
201
203
### Resolution
202
204
203
-
This error is unrecoverable. To resolve the alert, [delete your existing Azure AD DS managed domain](delete-aadds.md) and recreate it in your new directory. If you have trouble deleting the Azure AD DS managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
205
+
This error is unrecoverable. To resolve the alert, [delete your existing Azure AD DS managed domain](delete-aadds.md) and recreate it. If you have trouble deleting the Azure AD DS managed domain, [open an Azure support request][azure-support] for additional troubleshooting assistance.
204
206
205
207
## AADDS115: Resources are locked
206
208
@@ -240,7 +242,7 @@ To check for applied policies on the Azure AD DS components and update them, com
240
242
241
243
### Resolution
242
244
243
-
[Check the Azure AD DS health](check-health.md) for any alerts that indicate problems in the configuration of the managed domain. Problems with the network configuration can block the synchronization from Azure AD. If you are able to resolve any alerts that indicate a configuration issue, wait two hours and check back to see if the synchronization has completed.
245
+
[Check the Azure AD DS health](check-health.md) for any alerts that indicate problems in the configuration of the managed domain. Problems with the network configuration can block the synchronization from Azure AD. If you're able to resolve any alerts that indicate a configuration issue, wait two hours and check back to see if the synchronization has completed.
244
246
245
247
The following common reasons cause synchronization to stop in an Azure AD DS managed domains:
246
248
@@ -255,7 +257,7 @@ The following common reasons cause synchronization to stop in an Azure AD DS man
255
257
256
258
### Resolution
257
259
258
-
[Check the Azure AD DS health](check-health.md) for any alerts that indicate problems in the configuration of the managed domain. Problems with the network configuration can block the Azure platform from successfully taking backups. If you are able to resolve any alerts that indicate a configuration issue, wait two hours and check back to see if the synchronization has completed.
260
+
[Check the Azure AD DS health](check-health.md) for any alerts that indicate problems in the configuration of the managed domain. Problems with the network configuration can block the Azure platform from successfully taking backups. If you're able to resolve any alerts that indicate a configuration issue, wait two hours and check back to see if the synchronization has completed.
259
261
260
262
## AADDS503: Suspension due to disabled subscription
261
263
@@ -268,7 +270,7 @@ The following common reasons cause synchronization to stop in an Azure AD DS man
268
270
> [!WARNING]
269
271
> If an Azure AD DS managed domain is suspended for an extended period of time, there's a danger of it being deleted. Resolve the reason for suspension as quickly as possible. For more information, see [Understand the suspended states for Azure AD DS](suspension.md).
270
272
271
-
Azure AD DS requires an active subscription. If the Azure subscription that the Azure AD DS managed domain was associated with isn't active, you must renew it to reactive the subscription.
273
+
Azure AD DS requires an active subscription. If the Azure subscription that the Azure AD DS managed domain was associated with isn't active, you must renew it to reactivate the subscription.
272
274
273
275
1.[Renew your Azure subscription](https://docs.microsoft.com/azure/billing/billing-subscription-become-disable).
274
276
2. Once the subscription is renewed, an Azure AD DS notification lets you re-enable the managed domain.
@@ -286,7 +288,7 @@ When the managed domain is enabled again, the Azure AD DS managed domain's healt
286
288
> [!WARNING]
287
289
> If an Azure AD DS managed domain is suspended for an extended period of time, there's a danger of it being deleted. Resolve the reason for suspension as quickly as possible. For more information, see [Understand the suspended states for Azure AD DS](suspension.md).
288
290
289
-
[Check the Azure AD DS health](check-health.md) for any alerts that indicate problems in the configuration of the managed domain. If you are able to resolve any alerts that indicate a configuration issue, wait two hours and check back to see if the synchronization has completed. When ready, [open an Azure support request][azure-support] to re-enable the Azure AD DS managed domain.
291
+
[Check the Azure AD DS health](check-health.md) for any alerts that indicate problems in the configuration of the managed domain. If you're able to resolve any alerts that indicate a configuration issue, wait two hours and check back to see if the synchronization has completed. When ready, [open an Azure support request][azure-support] to re-enable the Azure AD DS managed domain.
0 commit comments