Home

Error with Azure Active Directory Connect Health

%3CLINGO-SUB%20id%3D%22lingo-sub-103652%22%20slang%3D%22en-US%22%3EError%20with%20Azure%20Active%20Directory%20Connect%20Health%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-103652%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Team%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EToday%20I%20successfully%20integrated%20On-prem%20AD%20with%20Cloud%20AD.%20%26nbsp%3BI%20have%20verified%20that%20changes%2Fadditions%20made%20on%20Local%20AD%20are%20being%20synced%20to%20Cloud%20AD.%20So%20sync%20is%20working%20fine.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20my%20Office365%20portal%2C%20I%20am%20seeing%20that%20sync%20is%20successful%20and%20data%20is%20coming%20in.%20However%2C%20on%20Azure%20AD%20Connect%20Health%2C%20it%20is%20showing%20errors.%20In%20that%20section%2C%20%3CSTRONG%3Ethe%20domain%20listed%20in%20the%20Sync%20Error%20section%20is%20incorrect%3C%2FSTRONG%3E%2C%20my%20domain%20is%20not%20an%26nbsp%3Bonmicrosoft%20one%20but%20a%20dedicated%20one.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%2C%20How%20do%20I%20tell%20Connect%20Health%20to%20track%20proper%20domain%3F%20Any%20method(s)%20to%20refresh%20it%20or%20Reinstall%20that%20particular%20software%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F19659i7A9055A24EB958E1%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Screen%20Shot%202017-09-06%20at%2012.01.33%20PM.png%22%20title%3D%22Screen%20Shot%202017-09-06%20at%2012.01.33%20PM.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F19660iAF0F19B11AE443C9%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Screen%20Shot%202017-09-06%20at%2011.58.43%20AM.png%22%20title%3D%22Screen%20Shot%202017-09-06%20at%2011.58.43%20AM.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-103652%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-105095%22%20slang%3D%22en-US%22%3ERe%3A%20Error%20with%20Azure%20Active%20Directory%20Connect%20Health%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-105095%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20problem%20was%20indeed%20linked%20to%20my%20licensing.%20Thank%20you%20for%20pointing%20it%20out.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20under%20Microsoft%20Business%20License%2C%20and%20Azure%20P1%20comes%20only%20for%20Enterprise%20editions.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-105030%22%20slang%3D%22en-US%22%3ERe%3A%20Error%20with%20Azure%20Active%20Directory%20Connect%20Health%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-105030%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20check%20the%20below%20as%20per%20the%20same%20article%20first%20agent%20requires%20at%20least%20one%20AAD%20Premium%20and%20each%20additional%20registered%20wil%20require%2025%20more%20......hope%20this%20helps%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EQ%3A%20How%20many%20licenses%20do%20I%20need%20to%20monitor%20my%20infrastructure%3F%3C%2FSTRONG%3E%3C%2FP%3E%3CUL%3E%3CLI%3EThe%20first%20Connect%20Health%20Agent%20requires%20at%20least%20one%20Azure%20AD%20Premium%20license.%3C%2FLI%3E%3CLI%3EEach%20additional%20registered%20agent%20requires%2025%20additional%20Azure%20AD%20Premium%20licenses.%3C%2FLI%3E%3CLI%3EAgent%20count%20is%20equivalent%20to%20the%20total%20number%20of%20agents%20that%20are%20registered%20across%20all%20monitored%20roles%20(AD%20FS%2C%20Azure%20AD%20Connect%2C%20and%2For%20AD%20DS).%3C%2FLI%3E%3C%2FUL%3E%3CP%3ELicensing%20information%20is%20also%20found%20on%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Faadpricing%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EAzure%20AD%20Pricing%20page%3C%2FA%3E.%3C%2FP%3E%3CP%3EExample%3A%3C%2FP%3E%3CP%3ERegistered%20agents%20Licenses%20needed%20Example%20monitoring%20configuration%3C%2FP%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3E1%3C%2FTD%3E%3CTD%3E1%3C%2FTD%3E%3CTD%3E1%20Azure%20AD%20Connect%20server%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2%3C%2FTD%3E%3CTD%3E26%3C%2FTD%3E%3CTD%3E1%20Azure%20AD%20Connect%20server%20and%201%20domain%20controller%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E3%3C%2FTD%3E%3CTD%3E51%3C%2FTD%3E%3CTD%3E1%20Active%20Directory%20Federation%20Services%20(AD%20FS)%20server%2C%201%20AD%20FS%20proxy%2C%20and%201%20domain%20controller%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E4%3C%2FTD%3E%3CTD%3E76%3C%2FTD%3E%3CTD%3E1%20AD%20FS%20server%2C%201%20AD%20FS%20proxy%2C%20and%202%20domain%20controllers%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E5%3C%2FTD%3E%3CTD%3E101%3C%2FTD%3E%3CTD%3E1%20Azure%20AD%20Connect%20server%2C%201%20AD%20FS%20server%2C%201%20AD%20FS%20proxy%2C%20and%202%20domain%20controllers%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-104163%22%20slang%3D%22en-US%22%3ERe%3A%20Error%20with%20Azure%20Active%20Directory%20Connect%20Health%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-104163%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20the%20license%20for%26nbsp%3B%3CSPAN%3EAzure%20Active%20Directory%20%3CSTRONG%3EP1%3C%2FSTRONG%3E.%20Is%20that%20enough%20for%20this%20to%20work%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-103687%22%20slang%3D%22en-US%22%3ERe%3A%20Error%20with%20Azure%20Active%20Directory%20Connect%20Health%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-103687%22%20slang%3D%22en-US%22%3E%3CP%3EFew%20thoughts%26nbsp%3Bas%20per%20screenshot%20its%20clearly%20seen%20that%20AD%20-%20Azure%20AD%20are%20in%20Sync%20.%3C%2FP%3E%3CP%3EHow%20many%20AAD%20Connect%20servers%20we%20have%20%3F%3C%2FP%3E%3CP%3EDo%20we%20have%20AAD%20Premium%20license%20for%20Health%20Montoring%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20seems%20issue%20is%20not%20with%20AAD%20Connect%20Sync%20rather%20seems%20to%20be%20an%20issue%20with%20Health%20Connect%20Agent.%20Health%20Connect%20agent%20requires%20AD%20Premium%20license%20so%20if%20you%20have%20installed%20AD%20Connect%20Health%20Agent%20inorder%20to%20use%20that%26nbsp%3B%20successfully%20you%20would%20require%20AD%20Premium%20License.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20refer%20FAQ's%20for%20AAD%20Connect%20Health%20Agent%20below%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fblob%2Fmaster%2Farticles%2Factive-directory%2Fconnect-health%2Factive-directory-aadconnect-health-faq.md%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fblob%2Fmaster%2Farticles%2Factive-directory%2Fconnect-health%2Factive-directory-aadconnect-health-faq.md%3C%2FA%3E%3C%2FP%3E%3CP%3EHope%20this%20helps%3C%2FP%3E%3C%2FLINGO-BODY%3E
Deleted
Not applicable

Hello Team,

 

Today I successfully integrated On-prem AD with Cloud AD.  I have verified that changes/additions made on Local AD are being synced to Cloud AD. So sync is working fine. 

 

In my Office365 portal, I am seeing that sync is successful and data is coming in. However, on Azure AD Connect Health, it is showing errors. In that section, the domain listed in the Sync Error section is incorrect, my domain is not an onmicrosoft one but a dedicated one. 

 

So, How do I tell Connect Health to track proper domain? Any method(s) to refresh it or Reinstall that particular software? 

Screen Shot 2017-09-06 at 12.01.33 PM.png

Screen Shot 2017-09-06 at 11.58.43 AM.png

4 Replies

Few thoughts as per screenshot its clearly seen that AD - Azure AD are in Sync .

How many AAD Connect servers we have ?

Do we have AAD Premium license for Health Montoring ?

 

It seems issue is not with AAD Connect Sync rather seems to be an issue with Health Connect Agent. Health Connect agent requires AD Premium license so if you have installed AD Connect Health Agent inorder to use that  successfully you would require AD Premium License.

 

Please refer FAQ's for AAD Connect Health Agent below

 

https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/connect-health/act...

Hope this helps

I have the license for Azure Active Directory P1. Is that enough for this to work? 

Hi ,

 

Please check the below as per the same article first agent requires at least one AAD Premium and each additional registered wil require 25 more ......hope this helps

 

Q: How many licenses do I need to monitor my infrastructure?

  • The first Connect Health Agent requires at least one Azure AD Premium license.
  • Each additional registered agent requires 25 additional Azure AD Premium licenses.
  • Agent count is equivalent to the total number of agents that are registered across all monitored roles (AD FS, Azure AD Connect, and/or AD DS).

Licensing information is also found on the Azure AD Pricing page.

Example:

Registered agents Licenses needed Example monitoring configuration

111 Azure AD Connect server
2261 Azure AD Connect server and 1 domain controller
3511 Active Directory Federation Services (AD FS) server, 1 AD FS proxy, and 1 domain controller
4761 AD FS server, 1 AD FS proxy, and 2 domain controllers
51011 Azure AD Connect server, 1 AD FS server, 1 AD FS proxy, and 2 domain controllers

The problem was indeed linked to my licensing. Thank you for pointing it out. 

I was under Microsoft Business License, and Azure P1 comes only for Enterprise editions. 

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
38 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies