Updated 04/18/25: Based on customer feedback around challenges with setting up the connector with build 6.2501.2000.5, we have released an updated build with improved functionality and updated our tr...
Updated Apr 18, 2025
Version 5.0
Blog Post
We have an issue installing the new connector - we followed the article and gave the installation user all the correct permissions.
The msa account was created, but encountered permission errors in the ODJConnector log. So we gave the msa account full control of the OU and ensured it have Create and Delete Computer objects. We get this error :
Failed to grant the Managed Service Account with the name "msaODJAf7Sv" permission to create computer objects in the Organizational Unit with the name "CN=Computers,DC=xxx,DC=xxx,DC=com" due to the following error: Unknown error: System.DirectoryServices.DirectoryServicesCOMException (0x8007202F): A constraint violation occurred.
I logged a support case for out issue, and have been working with an engineer to resolve it for over 6 weeks with no progress. We have asked several times for them to contact the product team and get the date the old connector will stop working, with no response.
We don't know where to go now, we are told the old connector will stop working - Microsoft Support are unable to get the new connector working and unwilling to escalate to the product team.
Hi,
Just to confirm, did you modify the ODJConnectorEnrollmentWizard.exe.config XML file found in C:\Program Files\Microsoft Intune\ODJConnector\ODJConnectorEnrollmentWizard to allow the MSA to create objects in OUs-
In the add key element of the ODJConnectorEnrollmentWizard.exe.config XML file:
<add key="OrganizationalUnitsUsedForOfflineDomainJoin" value="OU=CN=Computers,DC=xxx,DC=xxx,DC=com=com" />