Forum Discussion

Mame Meier's avatar
Mame Meier
Copper Contributor
Nov 03, 2025
Solved

new Exchange Installation Autodiscover

Hi I have had a lab environment and suspended this to get experience with a new setup. Old setup had a ADFS server in place. New lab setup is based on Windows Server 2025, 1 DC, 1 Exchange server S...
Exchange Server
outlook
  • Zohaib_Yousuf's avatar
    Zohaib_Yousuf
    Nov 16, 2025

    Hi,

    As per my understanding, Your Domain Is Still Federated.

    Go to Entra ID → Custom Domain Names and check your domain.

    It will likely show:

    Authentication Type: Federated
    instead of:
    Authentication Type: Managed

    This happens because: Old lab used ADFS

    You created a new lab but synced the same domain name, Entra ID stored the old federation configuration, including metadata, Sign-in URL, and IssuerURI


    How to Fix the Issue: Convert Domain from Federated → Managed (recommended)

    Once you convert:
    Outlook autodiscover will stop redirecting to ADFS

Zohaib_Yousuf's avatar
Zohaib_Yousuf
MCT
Nov 16, 2025

Hi,

As per my understanding, Your Domain Is Still Federated.

Go to Entra ID → Custom Domain Names and check your domain.

It will likely show:

Authentication Type: Federated
instead of:
Authentication Type: Managed

This happens because: Old lab used ADFS

You created a new lab but synced the same domain name, Entra ID stored the old federation configuration, including metadata, Sign-in URL, and IssuerURI


How to Fix the Issue: Convert Domain from Federated → Managed (recommended)

Once you convert:
Outlook autodiscover will stop redirecting to ADFS

  • Mame Meier's avatar
    Mame Meier
    Copper Contributor
    Nov 26, 2025

    Hi

    my internet connection is stable and I am still getting an error on the command:

    PS C:\WINDOWS\system32> Update-MgDomain -DomainId DOMAIN -AuthenticationType "Managed"
    Update-MgDomain : Insufficient privileges to complete the operation.
    Status: 403 (Forbidden)
    ErrorCode: Authorization_RequestDenied
    Date: 2025-11-26T13:28:48

    How do I check my privileges on EntrID. I am "almost" sure I do have the sufficient rights. My account is set as DomainAdministrator

     

    THX

    • Zohaib_Yousuf's avatar
      Zohaib_Yousuf
      MCT
      Nov 30, 2025

      Hi,

      1. Check your Entra ID role in the Azure Portal

      • Go to: https://entra.microsoft.com
      • In the left menu → Identity
      • Select Users
      • Search and open your account
      • Click Assigned roles

      You will now see whether you have roles such as:

      • Global Administrator
      • Privileged Role Administrator
      • Security Administrator
      • Cloud Application Administrator
      • Application Administrator
      • User Administrator

      These are the cloud roles that matter for Entra ID.

       

      2. Check your Entra roles via PowerShell

      Run:

      Connect-MgGraph -Scopes "RoleManagement.Read.All"
      Get-MgUserAppRoleAssignment -UserId "<YourUPN>" | Select-Object ResourceDisplayName,AppRoleId

Resources