I am trying to install Azure AD Connect on 2019 server.
I uninstalled older version of AD Connect from server 2016. Than i tried installing V 2.0 to Server 2019 but got these errors.
[14:17:28.123] [110] [ERROR] Error granting directory permissions to account: MIDWEST-HEALTH.COM\MSOL_3bb18b91def3 using credentials: MIDWEST-HEALTH.COM\aos365. Check the event log for additional details
[14:17:28.124] [110] [ERROR] Caught exception while creating synchronization account.
Exception Data (Raw): System.DirectoryServices.DirectoryServicesCOMException (0x8007202F): A constraint violation occurred.
at System.DirectoryServices.DirectoryEntry.CommitChanges()
at Microsoft.Online.DirSync.Common.DomainAccountUtility.UpdatePermissionsOnDomains(DomainCollection domains, SecurityIdentifier sid, AccessControlEntryUpdateAction actionType, ActiveDirectoryRights accessType, Guid accessRightsGuid, Boolean applyToAdminSDHolder, Guid inheritedObject, ActiveDirectorySecurityInheritance inheritanceType)
at Microsoft.Azure.ActiveDirectory.Synchronization.Framework.ActiveDirectoryPermissionsHelper.UpdateAccessRightsOnAllDomainsInForest(String forestFQDN, NetworkCredential domainAdminCredential, String samAccountName, AccessControlEntryUpdateAction accessControlEntryUpdateAction, ActiveDirectoryRights accessType, Guid accessRightsGuid, Boolean applyToAdminSDHolder, Guid inheritedObject, ActiveDirectorySecurityInheritance inheritanceType)
at Microsoft.Azure.ActiveDirectory.Synchronization.Framework.ActiveDirectoryPermissionsHelper.GrantReplicationGetChangesPermissionToAllDomainsInForest(String forestFQDN, NetworkCredential domainAdminCredential, String synchronizationAccountName)
at Microsoft.Azure.ActiveDirectory.Synchronization.Framework.ADConnectorAccountProvider.GrantAllActiveDirectoryPermissions(String forestFQDN, NetworkCredential enterpriseAdminCredential, String syncAccountName)
at Microsoft.Azure.ActiveDirectory.Synchronization.Framework.ADConnectorAccountProvider.CreateADConnectorAccount(String forestFQDN, NetworkCredential domainAdminCredential, String installationIdentifier, String tenantDisplayName)
at Microsoft.Online.Deployment.OneADWizard.Runtime.Stages.ConfigureSyncEngineStage.StartADSyncConfigurationCore(Action`1 UpdateProgressText)
[14:17:28.124] [110] [INFO ] ConfigureSyncEngineStage.StartADSyncConfiguration: AADConnectResult.Status=Failed
[14:17:28.124] [110] [INFO ] ConfigureSyncEngineStage.StartADSyncConfiguration: Error details: System.DirectoryServices.DirectoryServicesCOMException (0x8007202F): A constraint violation occurred.
at System.DirectoryServices.DirectoryEntry.CommitChanges()
at Microsoft.Online.DirSync.Common.DomainAccountUtility.UpdatePermissionsOnDomains(DomainCollection domains, SecurityIdentifier sid, AccessControlEntryUpdateAction actionType, ActiveDirectoryRights accessType, Guid accessRightsGuid, Boolean applyToAdminSDHolder, Guid inheritedObject, ActiveDirectorySecurityInheritance inheritanceType)
at Microsoft.Azure.ActiveDirectory.Synchronization.Framework.ActiveDirectoryPermissionsHelper.UpdateAccessRightsOnAllDomainsInForest(String forestFQDN, NetworkCredential domainAdminCredential, String samAccountName, AccessControlEntryUpdateAction accessControlEntryUpdateAction, ActiveDirectoryRights accessType, Guid accessRightsGuid, Boolean applyToAdminSDHolder, Guid inheritedObject, ActiveDirectorySecurityInheritance inheritanceType)
at Microsoft.Azure.ActiveDirectory.Synchronization.Framework.ActiveDirectoryPermissionsHelper.GrantReplicationGetChangesPermissionToAllDomainsInForest(String forestFQDN, NetworkCredential domainAdminCredential, String synchronizationAccountName)
at Microsoft.Azure.ActiveDirectory.Synchronization.Framework.ADConnectorAccountProvider.GrantAllActiveDirectoryPermissions(String forestFQDN, NetworkCredential enterpriseAdminCredential, String syncAccountName)
at Microsoft.Azure.ActiveDirectory.Synchronization.Framework.ADConnectorAccountProvider.CreateADConnectorAccount(String forestFQDN, NetworkCredential domainAdminCredential, String installationIdentifier, String tenantDisplayName)
at Microsoft.Online.Deployment.OneADWizard.Runtime.Stages.ConfigureSyncEngineStage.StartADSyncConfigurationCore(Action`1 UpdateProgressText)
at Microsoft.Online.Deployment.OneADWizard.Runtime.Stages.ConfigureSyncEngineStage.StartADSyncConfiguration(Action`1 UpdateProgressText)
[14:17:28.125] [110] [ERROR] ExecuteADSyncConfiguration: configuration failed. Skipping export of synchronization policy. resultStatus=Failed
[14:17:28.129] [110] [ERROR] PerformConfigurationPageViewModel: An error occurred while retrieving the Active Directory schema. The error was: A constraint violation occurred.
[14:17:28.129] [110] [ERROR] PerformConfigurationPageViewModel: A constraint violation occurred.
[14:25:03.188] [ 1] [INFO ] Opened log file at path C:\ProgramData\AADConnect\trace-20210924-133604.log
Please help. I have about 3000 users that are not syncing. Microsoft support is not helping.
