Search code examples
azure-active-directorysynchronizationvirtual-desktop

Unable to create the synchronization service account for Azure Active Directory. Retrying this operation may help resolve the issue

I am getting this error. How can I configure this? I am setting up a virtual machine to login my AD Account. I want to log my office 365 account and members to access the virtual machine machine. Right now I am configuring the AD account connectivity.

These are errors from logs :

[05:00:31.709] [ 27] [ERROR] ExecuteADSyncConfiguration: configuration failed.  Skipping export of synchronization policy.  resultStatus=Failed
[05:00:31.710] [ 27] [ERROR] PerformConfigurationPageViewModel: An error occurred while creating the synchronization service account in Azure AD. The error was: Unable to create the synchronization service account for Azure Active Directory.  Retrying this operation may help resolve the issue.  
[05:00:31.710] [ 27] [ERROR] PerformConfigurationPageViewModel: Unable to create the synchronization service account for Azure Active Directory.  Retrying this operation may help resolve the issue.  
[05:03:10.957] [  1] [INFO ] Opened log file at path C:\ProgramData\AADConnect\trace-20221220-041351.log

enter image description here

Solution

  • I tried to reproduce the same in my environment and got the same error like below:

    Unable to create the synchronization service account for Azure ActiveDirectory

    This error occurs, the account authenticates earlier in the session conditional Access is blocking the account you are using as the Azure AD admin account when you are going through the wizard ref:

    To resolve this error: Login with admin account -> sing-in logs under monitoring -> check the user sign-in logs and non-interactive log are failure.

    enter image description here

    • Check if multiple access policy is enabled in service account try to disable it orelse and try to exclude your Ip range like below:
    • When MFA is enabled in the Azure Environment, the Sync Account will incorrectly detect error message try to disable MFA for the account and restarting the wizard.

    enter image description here

    Now, when I try to connect azure AD account it configured successfully like below:

    enter image description here

    Install azure ad connect successfully like below:

    enter image description here

    Reference:

    Azure AD Connect – Unable to Create the Synchronization Service Account for Azure AD – by Sam's Corner

    Unable to create the syncronization service account for Azure Active Directory- Microsoft by mfreitas