JoinDomain / Conflict

Reference:

1. https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Getting-started-with-Windows-Virtual-Desktop/ba-p/391054

2. https://docs.microsoft.com/en-us/azure/virtual-desktop/tenant-setup-azure-active-directory

Following these two sets of instructions I end up like this post:

https://techcommunity.microsoft.com/t5/Windows-Virtual-Desktop/Azure-Windows-Virtual-Desktop-Provision-Host-Pool-JoinDomain/m-p/727794

With the following Errors:

{

"code": "DeploymentFailed",

"message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-debug for usage details.",

"details": [

{

"code": "Conflict",

"message": "{\r\n \"status\": \"Failed\",\r\n \"error\": {\r\n \"code\": \"ResourceDeploymentFailure\",\r\n \"message\": \"The resource operation completed with terminal provisioning state 'Failed'.\",\r\n \"details\": [\r\n {\r\n \"code\": \"VMExtensionProvisioningError\",\r\n \"message\": \"VM has reported a failure when processing extension 'joindomain'. Error message: \\\"Exception(s) occured while joining Domain 'ericperiardoutlook.onmicrosoft.com'\\\".\"\r\n }\r\n ]\r\n }\r\n}"

{

"code": "Conflict",

}

]

}

Simple format:

{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-debug for usage details.","details":[{"code":"Conflict","message":"{\r\n \"status\": \"Failed\",\r\n \"error\": {\r\n \"code\": \"ResourceDeploymentFailure\",\r\n \"message\": \"The resource operation completed with terminal provisioning state 'Failed'.\",\r\n \"details\": [\r\n {\r\n \"code\": \"VMExtensionProvisioningError\",\r\n \"message\": \"VM has reported a failure when processing extension 'joindomain'. Error message: \\\"Exception(s) occured while joining Domain 'ericperiardoutlook.onmicrosoft.com'\\\".\"\r\n }\r\n ]\r\n }\r\n}"},{"code":"Conflict","message":"{\r\n \"status\": \"Failed\",\r\n \"error\": {\r\n \"code\": \"ResourceDeploymentFailure\",\r\n \"message\": \"The resource operation completed with terminal provisioning state 'Failed'.\",\r\n \"details\": [\r\n {\r\n \"code\": \"VMExtensionProvisioningError\",\r\n \"message\": \"VM has reported a failure when processing extension 'joindomain'. Error message: \\\"Exception(s) occured while joining Domain 'ericperiardoutlook.onmicrosoft.com'\\\".\"\r\n }\r\n ]\r\n }\r\n}"}]}

Operations details log:

{ "id": "/subscriptions/*********/resourceGroups/WVD_Res2/providers/Microsoft.Resources/deployments/rds.wvd-provision-host-pool-20190627145332/operations/E8FDFA5D64A165EB", "operationId": "E8FDFA5D64A165EB", "properties": { "provisioningOperation": "Create", "provisioningState": "Failed", "timestamp": "2019-06-27T19:19:39.8700652Z", "duration": "PT9M9.9497337S", "trackingId": "bf964015-bbdf-4c69-8487-5d253041057a", "statusCode": "Conflict", "statusMessage": { "status": "Failed", "error": { "code": "ResourceDeploymentFailure", "message": "The resource operation completed with terminal provisioning state 'Failed'.", "details": [ { "code": "VMExtensionProvisioningError", "message": "VM has reported a failure when processing extension 'joindomain'. Error message: \"Exception(s) occured while joining Domain 'ericperiardoutlook.onmicrosoft.com'\"." } ] } }, "targetResource": { "id": "/subscriptions/*********/resourceGroups/WVD_Res2/providers/Microsoft.Compute/virtualMachines/vD3sk-0/extensions/joindomain", "resourceType": "Microsoft.Compute/virtualMachines/extensions", "resourceName": "vD3sk-0/joindomain" } }}

The user used to create the pool global.esp@ericperiardoutlook.onmicrosoft.com is a Global Admin + Tenant Creator + AAD DC Administrator all-in-one for my test proof of concept.

I have built an environment successfully once within a day's work, but I pruned all the resource groups and rebuilt-it slowly for documentation purposes and after many many many attempts I have been unsuccessful and get the error above.

Please advise, I am out of troubleshooting options here :/

Stefan Georgiev
Dec 10, 2020
Can you check the paths here and share the lgos from here

C:\Packages\Plugins\Microsoft.Compute.JsonADDomainExtension
C:\WindowsAzure\Logs\Plugins\Microsoft.Compute.JsonADDomainExtension\1.3.6

Latest run that errors out also the version might be different

Also reading the error what is your DNS server setup on the VNET?

evasse
Microsoft
Jul 03, 2019
EricSP : have you reviewed our articles here?

https://docs.microsoft.com/en-us/azure/virtual-desktop/troubleshoot-set-up-issues

https://docs.microsoft.com/en-us/azure/virtual-desktop/troubleshoot-vm-configuration
- luketen
  Copper Contributor
  Apr 26, 2020
  Thanks evasse
- myusrn
  Brass Contributor
  Jun 07, 2020
  evasse thanks for this response. I've been trying repeatedly to setup a windows virtual desktop host pool in an azure subscription where i only have azure AD and azure AD domain services gc/dc deployed, i.e. not cloud diy vm gc/dc or vnet exposed on-premises classic AD gc/dc setups.
  
  The wvd host pool template processing kept failing on the host pool vm domain joining step and the fix was https://docs.microsoft.com/en-us/azure/virtual-desktop/troubleshoot-set-up-issues%C2%A0 -> "Cause 3: Your virtual network (VNET) DNS configuration is set to Default." defined fix.
  
  Seems like there should be some wvd host pool template wizard or walk through documentation on this scenario for companies that want wvd but are 100% azure active directory based with their IAM environment.
  
  Now the wvd host pool template is failing at point with this message:
  "VM has reported a failure when processing extension 'dscextension'. Error message: "DSC Configuration 'CreateHostPoolAndRegisterSessionHost' completed with error(s). Following are the first few: PowerShell DSC resource MSFT_ScriptResource failed to execute Test-TargetResource functionality with error message: Windows Virtual Desktop Authentication Failed . . ."
  - AllenVisserJhb
    Copper Contributor
    Jul 31, 2020
    myusrn
    Howzit, so i eventually got my WVD vms to domain join after many frustrating hours.
    I have a lab with a Windows AD DC vm and an AD Connect server (and even built Azure AD DS out of frustration!)
    I had repeatedly tried deploying the WVD vms using the Azure Global Admin account and each time it failed.
    I then went and created a different account on Windows AD with Enterprise Admins and used this account. The vms successfully joined using this Windows AD based Enterprise Admin account.
    Good luck.
jonmcwilliams
Copper Contributor
Dec 09, 2020
I'm having the same issues as Eric, I have a new Azure AD DS domain, and I'm trying to setup WVD ARM. Once I create the VM, I cannot seem to get it to successfully join the domain. I have tried the DNS fix, validated the credentials of the vmjoiner account (global admin). No matter what I do - it fails
    "properties": {
        "statusCode": "Conflict",
        "statusMessage": "{\"status\":\"Failed\",\"error\":{\"code\":\"ResourceDeploymentFailure\",\"message\":\"The resource operation completed with terminal provisioning state 'Failed'.\",\"details\":[{\"code\":\"VMExtensionProvisioningError\",\"message\":\"VM has reported a failure when processing extension 'joindomain'. Error message: \\\"Exception(s) occured while joining Domain 'dquin.onmicrosoft.com'\\\"\\r\\n\\r\\nMore information on troubleshooting is available at https://aka.ms/vmextensionwindowstroubleshoot \"}]}}",
        "eventCategory": "Administrative",
        "entity": "/subscriptions/b45ab268-91f4-412c-bc14-5d899771b190/resourcegroups/RG01/providers/Microsoft.Compute/virtualMachines/DQ-0/extensions/joindomain",
        "message": "Microsoft.Compute/virtualMachines/extensions/write",
- Stefan Georgiev
  Microsoft
  Dec 10, 2020
  jonmcwilliams when you setup Azure AD DS can you check if the DNS is setup to Azure or to the IP of Azure AD DS? It must be the later
Stefan Georgiev
Microsoft
Dec 10, 2020
Can you check the paths here and share the lgos from here

C:\Packages\Plugins\Microsoft.Compute.JsonADDomainExtension
C:\WindowsAzure\Logs\Plugins\Microsoft.Compute.JsonADDomainExtension\1.3.6

Latest run that errors out also the version might be different

Also reading the error what is your DNS server setup on the VNET?

Forum Discussion

JoinDomain / Conflict

Share

Resources