Hallo,
ich versuche gerade AAD Connect für unsere Deutschland Cloud Dienste einzurichten, aber der Assistent bricht immer einer Stelle ab.
[ich darf keine Bilder einfügen]
Im Logfile steht folgendes:
[17:07:03.256] [ 8] [INFO ] Creating AD Connector account for intern.*******.de.
[17:07:03.287] [ 8] [VERB ] CreateADConnectorAccount(System.Net.NetworkCredential, 7dee9fd1d7864b77a5f3714f60527378, *******.onmicrosoft.de)
[17:07:03.303] [ 8] [INFO ] AD Connector account will have account name intern.*******.de\MSOL_7dee9fd1d786
[17:07:03.568] [ 8] [INFO ] AD Connector account was created successfully.
[17:07:03.568] [ 8] [INFO ] GrantAllActiveDirectoryPermissions: Granting DsReplicationGetChanges permission on all domains for password hash synchronization.
[17:07:03.615] [ 8] [INFO ] GrantAllActiveDirectoryPermissions: Granting DsReplicationGetChangesAll permission on all domains for password hash synchronization.
[17:07:03.678] [ 8] [INFO ] GrantAllActiveDirectoryPermissions: Granting DsResetPassword permission on all domains for password writeback.
[17:07:03.725] [ 8] [INFO ] GrantAllActiveDirectoryPermissions: Granting attribute permissions (lockoutTime, pwdLastSet) on all domains for password writeback.
[17:07:04.740] [ 8] [INFO ] GrantAllActiveDirectoryPermissions: Granting read/write permissions for all attributes of 'contact' object type for Hybrid Exchange.
[17:07:04.803] [ 8] [INFO ] GrantAllActiveDirectoryPermissions: Granting read/write permissions for all attributes of 'group' object type for Hybrid Exchange.
[17:07:04.865] [ 8] [INFO ] GrantAllActiveDirectoryPermissions: Granting read/write permissions for all attributes of 'inetorgperson' object type for Hybrid Exchange.
[17:07:04.928] [ 8] [INFO ] GrantAllActiveDirectoryPermissions: Granting read/write permissions for all attributes of 'user' object type for Hybrid Exchange.
[17:07:04.990] [ 8] [INFO ] GrantAllActiveDirectoryPermissions: Granting read permissions for all attributes of 'publicFolder' object type for Exchange Mail Public Folder.
[17:07:05.647] [ 8] [INFO ] AD Connector account permissions restricted successfully.
[17:07:05.647] [ 8] [INFO ] AD Connector Username=intern.********.de\MSOL_7dee9fd1d786 created and given permissions.
[17:07:05.662] [ 8] [INFO ] Exit ConfigSyncDirectoriesPageViewModel:ValidateDirectoryConnection:
[17:07:10.022] [ 1] [INFO ] ProgressWizardPageViewModel:StartProgressOperation Start background task Microsoft.Online.Deployment.OneADWizard.UI.WizardPages.ConfigSyncDirectoriesPageViewModel.WaitForTaskCompletion in Page:"Verzeichnisse verbinden"
[17:07:10.022] [ 1] [INFO ] ProgressWizardPageViewModel:StartProgressOperation Started Background Task Id:18823
AzureADConnect.exe Information: 0 : Management Agent Created: C:\Program Files\Microsoft Azure Active Directory Connect\SetupFiles\MA-ADDSTemplate.xml.
[17:07:11.100] [ 12] [INFO ] SyncDataProvider: Calling refresh schema on connector intern.******.de
[17:07:12.037] [ 12] [ERROR] ConfigSyncDirectoriesPage: Caught exception while creating the connector for given directory.
Exception Data (Raw): System.Management.Automation.CmdletInvocationException: Failed to retrieve schema.<error><error><incident><connection-result>failed-authentication</connection-result><date>2018-04-03 15:07:11.178</date><server>intern.*******.de:389</server><cd-error><error-code>0x31</error-code>
<error-literal>Ungültige Anmeldeinformationen</error-literal>
</cd-error></incident></error></error> ---> Microsoft.IdentityManagement.PowerShell.ObjectModel.SynchronizationConfigurationValidationException: Failed to retrieve schema.<error><error><incident><connection-result>failed-authentication</connection-result><date>2018-04-03 15:07:11.178</date><server>intern.rvk.de:389</server><cd-error><error-code>0x31</error-code>
<error-literal>Ungültige Anmeldeinformationen</error-literal>
</cd-error></incident></error></error>
IdFix meldet keine Fehler.
Wie komme ich hier weiter?
Danke & Gruß
Klaus
