You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-domain-services/active-directory-ds-troubleshoot-alerts.md
+50-2Lines changed: 50 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ ms.workload: identity
13
13
ms.tgt_pltfrm: na
14
14
ms.devlang: na
15
15
ms.topic: article
16
-
ms.date: 02/05/2018
16
+
ms.date: 02/28/2018
17
17
ms.author: ergreenl
18
18
19
19
---
@@ -31,6 +31,13 @@ Pick the troubleshooting steps that correspond to or alert ID or message you enc
31
31
| AADDS102 |*A Service Principal required for Azure AD Domain Services to function properly has been deleted from your Azure AD directory. This configuration impacts Microsoft's ability to monitor, manage, patch, and synchronize your managed domain.*|[Missing Service Principal](active-directory-ds-troubleshoot-service-principals.md)|
32
32
| AADDS103 |*The IP address range for the virtual network in which you have enabled Azure AD Domain Services is in a public IP range. Azure AD Domain Services must be enabled in a virtual network with a private IP address range. This configuration impacts Microsoft's ability to monitor, manage, patch and synchronize your managed domain.*|[Address is in a public IP range](#aadds103-address-is-in-a-public-ip-range)|
33
33
| AADDS104 |*Microsoft is unable to reach the domain controllers for this managed domain. This may happen if a network security group (NSG) configured on your virtual network blocks access to the managed domain. Another possible reason is if there is a user defined route that blocks incoming traffic from the internet.*|[Network Error](active-directory-ds-troubleshoot-nsg.md)|
34
+
| AADDS500 |*The managed domain was last synchronized with Azure AD on {0}. Users may be unable to sign-in on the managed domain or group memberships may not be in sync with Azure AD.*|[Synchronization hasn't happened in a while](#aadds500-synchronization-has-not-completed-in-a-while)|
35
+
| AADDS501 |*The managed domain was last backed up on XX.*|[A backup hasn't been taken in a while](#aadds501-a-backup-has-not-been-taken-in-a-while)|
36
+
| AADDS502 |*The secure LDAP certificate for the managed domain will expire on XX.*|[Expiring secure LDAP certificate](active-directory-ds-troubleshoot-ldaps.md#aadds502-secure-ldap-certificate-expiring)|
37
+
| AADDS503 |*The managed domain is suspended because the Azure subscription associated with the domain is not active.*|[Suspension due to disabled subscription](#aadds503-suspension-due-to-disabled-subscription)|
38
+
| AADDS504 |*The managed domain is suspended due to an invalid configuration. The service has been unable to manage, patch, or update the domain controllers for your managed domain for a long time.*|[Suspension due to an invalid configuration](#aadds504-suspension-due-to-an-invalid-configuration)|
39
+
40
+
34
41
35
42
## AADDS100: Missing directory
36
43
**Alert message:**
@@ -72,7 +79,7 @@ To restore your service, follow these steps:
72
79
73
80
Before you begin, read the **private IP v4 address space** section in [this article](https://en.wikipedia.org/wiki/Private_network#Private_IPv4_address_spaces).
74
81
75
-
Inside the virtual network, machines may make requests to Azure resources that are in the same IP address range as those configured for the subnet. However, since the virtual network is configured for this range, those requests will be routed within the virtual network and will not reach the intended web resources. This can lead to unpredictable errors with Azure AD Domain Services.
82
+
Inside the virtual network, machines may make requests to Azure resources that are in the same IP address range as those configured for the subnet. However, since the virtual network is configured for this range, those requests will be routed within the virtual network and will not reach the intended web resources. This configuration can lead to unpredictable errors with Azure AD Domain Services.
76
83
77
84
**If you own the IP address range in the internet that is configured in your virtual network, this alert can be ignored. However, Azure AD Domain Services cannot commit to the [SLA](https://azure.microsoft.com/support/legal/sla/active-directory-ds/v1_0/)] with this configuration since it can lead to unpredictable errors.**
78
85
@@ -90,6 +97,47 @@ Inside the virtual network, machines may make requests to Azure resources that a
90
97
4. To domain-join your virtual machines to your new domain, follow [this guide](active-directory-ds-admin-guide-join-windows-vm-portal.md).
91
98
8. To ensure the alert is resolved, check your domain's health in two hours.
92
99
100
+
## AADDS500: Synchronization has not completed in a while
101
+
102
+
**Alert message:**
103
+
104
+
*The managed domain was last synchronized with Azure AD on {0}. Users may be unable to sign-in on the managed domain or group memberships may not be in sync with Azure AD.*
105
+
106
+
**Remediation:**
107
+
108
+
[Check your domain's health](active-directory-ds-check-health.md) for any alerts that might indicate problems in your configuration of your managed domain. Sometimes, problems with your configuration can block Microsoft's ability to synchronize your managed domain. If you are able to resolve any alerts, wait two hours and check back to see if the synchronization has completed.
109
+
110
+
111
+
## AADDS501: A backup has not been taken in a while
112
+
113
+
**Alert message:**
114
+
115
+
*The managed domain was last backed up on XX.*
116
+
117
+
**Remediation:**
118
+
119
+
[Check your domain's health](active-directory-ds-check-health.md) for any alerts that might indicate problems in your configuration of your managed domain. Sometimes, problems with your configuration can block Microsoft's ability to synchronize your managed domain. If you are able to resolve any alerts, wait two hours and check back to see if the synchronization has completed.
120
+
121
+
122
+
## AADDS503: Suspension due to disabled subscription
123
+
124
+
**Alert message:**
125
+
126
+
*The managed domain is suspended because the Azure subscription associated with the domain is not active.*
127
+
128
+
**Remediation:**
129
+
130
+
To restore your service, [renew your Azure subscription](https://docs.microsoft.com/en-us/azure/billing/billing-subscription-become-disable) associated with your managed domain.
131
+
132
+
## AADDS504: Suspension due to an invalid configuration
133
+
134
+
**Alert message:**
135
+
136
+
*The managed domain is suspended due to an invalid configuration. The service has been unable to manage, patch, or update the domain controllers for your managed domain for a long time.*
137
+
138
+
**Remediation:**
139
+
140
+
[Check your domain's health](active-directory-ds-check-health.md) for any alerts that might indicate problems in your configuration of your managed domain. If you can resolve any of these alerts, do so. After, contact support to re-enable your subscription.
93
141
94
142
## Contact us
95
143
Contact the Azure Active Directory Domain Services product team to [share feedback or for support](active-directory-ds-contact-us.md).
Copy file name to clipboardExpand all lines: articles/active-directory-domain-services/active-directory-ds-troubleshoot-ldaps.md
+11-1Lines changed: 11 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ ms.workload: identity
13
13
ms.tgt_pltfrm: na
14
14
ms.devlang: na
15
15
ms.topic: article
16
-
ms.date: 02/02/2018
16
+
ms.date: 02/21/2018
17
17
ms.author: ergreenl
18
18
19
19
---
@@ -49,5 +49,15 @@ When secure LDAP is enabled, we recommend creating additional rules to allow inb
49
49
> Port 636 is not the only rule needed for Azure AD Domain Services to run smoothly. To learn more, visit the [Networking guidelines](active-directory-ds-networking.md) or [Troubleshoot NSG configuration](active-directory-ds-troubleshoot-nsg.md) articles.
50
50
>
51
51
52
+
## AADDS502: Secure LDAP certificate expiring
53
+
54
+
**Alert message:**
55
+
56
+
*The secure LDAP certificate for the managed domain will expire on XX.*
57
+
58
+
**Remediation:**
59
+
60
+
Create a new secure LDAP certificate by following the steps outlined in the [Configure secure LDAP](active-directory-ds-admin-guide-configure-secure-ldap.md) article.
61
+
52
62
## Contact us
53
63
Contact the Azure Active Directory Domain Services product team to [share feedback or for support](active-directory-ds-contact-us.md).
Copy file name to clipboardExpand all lines: articles/active-directory-domain-services/active-directory-ds-troubleshoot-nsg.md
+34-35Lines changed: 34 additions & 35 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ ms.workload: identity
13
13
ms.tgt_pltfrm: na
14
14
ms.devlang: na
15
15
ms.topic: article
16
-
ms.date: 02/12/2018
16
+
ms.date: 03/01/2018
17
17
ms.author: ergreenl
18
18
19
19
---
@@ -55,7 +55,7 @@ Follow the instructions to [install the Azure PowerShell module and connect to y
55
55
> We recommend using the latest version of the Azure PowerShell module. If you already have an older version of the Azure PowerShell module installed, update to the latest version.
56
56
>
57
57
58
-
Use the following steps to create a new NSG using PowerShell.
58
+
Use the following steps to create a new NSG using PowerShell.
59
59
1. Log in to your Azure subscription.
60
60
61
61
```PowerShell
@@ -67,33 +67,34 @@ Use the following steps to create a new NSG using PowerShell.
67
67
68
68
```PowerShell
69
69
# Allow inbound HTTPS traffic to enable synchronization to your managed domain.
> This default NSG does not lock down access to the port used for Secure LDAP. To lock down Secure LDAP access over the internet, see [this article](active-directory-ds-troubleshoot-ldaps.md).
166
-
>
167
166
168
167
## Need help?
169
168
Contact the Azure Active Directory Domain Services product team to [share feedback or for support](active-directory-ds-contact-us.md).
0 commit comments