question

AdministradorSistemas-7795 avatar image
0 Votes"
AdministradorSistemas-7795 asked ·

ADConnect reinstallation problem

Hi everybody.

Trying to start from scartch, I'd first disabled DirSync with

 Set-MsolDirSyncEnabled -EnableDirsync $False

and then uninstalled ADConnect from Add/Remove programs.

My initial setup was with Hash sync and SSO.

Now, when I try to install again, I got an error telling that it's in a pending disabling state. If I check with

 (get-msolcompanyinformation).DirectorySynchronizationEnabled

it's in a False state.

But PasswordSynchronizationEnabled is in true state.

At Azure portal, I can see that DirSync is not installed but Hash syn is still enabled, and SSO too. No other related is enabled.
Thanks for your help in advance.

azure-active-directoryazure-ad-connect
· 2
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

At the moment I have the same problem in a test-environment. I did remove the AAD Connect software to install it in a different way. You can check the status using:

(Get-MsolCompanyInformation).directorysynchronizationstatus

In my case it shows PendingDisabled. I guess we have to wait. You can make a small powershell script that’s send you a mail when this status is changed.

1 Vote 1 ·

Hi @RobvandenBroek-8832
In my case it was in false status immediately after

Set-MsolDirSyncEnabled –EnableDirSync $False

At first try after 72 hours I managed to reinstall but today, after another uninstallation and more than 72 hours, not.

0 Votes 0 ·
TDeman avatar image
1 Vote"
TDeman answered ·

Hello,

when synchronization is disabled, you could have to wait until 72 hours before the change is fully applied to all users, converting them in managed accounts.

That is the reason of the "pending state".

After finishing this step, you would be able to reconfigure the new ADConnect server.

Bye.

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AdministradorSistemas-7795 avatar image
0 Votes"
AdministradorSistemas-7795 answered ·

Thanks, I knew it, but the False state result of (get-msolcompanyinformation).DirectorySynchronizationEnabled, confuse me. I think it should be Pending.

Today I manage to reinstall.

Regards.







·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AdministradorSistemas-7795 avatar image
0 Votes"
AdministradorSistemas-7795 answered ·

HI.
I've uninstalled last wednesday and today (more than 72 h) when reinstalling got the same error, pending disable, but

DirectorySynchronizationEnabled : False

LastDirSyncTime : 20/05/2020 16:43:25

LastPasswordSyncTime : 20/05/2020 16:45:58

PasswordSynchronizationEnabled : True

Need to wait more?

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AdministradorSistemas-7795 avatar image
0 Votes"
AdministradorSistemas-7795 answered ·

Ok, I was checking the wrong parameter
(Get-MsolCompanyInformation).directorysynchronizationstatus is still in PendingDisabled status so need to wait more (than 72 hours)















·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ManuPhilip avatar image
0 Votes"
ManuPhilip answered ·

Hello @AdministradorSistemas-7795,

The steps below can help to resolve the issue:

Run the PowerShell cmdlets:

 Connect-MSOLService 

 (Get-MSOLCompanyInformation).DirectorySynchronizationStatus

It it shows as "PendingEnabled" or "PendingDisabled" still, follow the below steps. It is a known bug and to report to Microsoft with the details

Context ID: Type the following cmdlet and enter

 (Get-MSOLCompanyInformation).objectID 

Service instance: Type the following cmdlet and enter

 (Get-MSOLCompanyInformation).AuthorizedServiceInstances 

Please mark as "Accept the answer" if the above helps you. Others with similar issue can follow the solution

Regards,

Manu

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RobvandenBroek-8832 avatar image
0 Votes"
RobvandenBroek-8832 answered ·

@AdministradorSistemas-7795

Yes, you did look at the wrong object.
It is a known bug at Microsoft.
After waiting for more that 72h it stills got the same problem. By the way - I made a small script that would sent me a msg when the problem was solved. Maybe you can use it to monitor the state.

 Connect-MsolService -Credential $MyCredential
 DO
 {
     $status = (Get-MsolCompanyInformation).directorysynchronizationstatus
     $status
     Start-Sleep -s 300
 } while ($status -eq "PendingDisabled")
 $secpasswd = ConvertTo-SecureString "PASSWORD" -AsPlainText -Force
 $cred = New-Object System.Management.Automation.PSCredential ("Loginaccount", $secpasswd)
 Send-MailMessage -SmtpServer 'smtp.office365.com' -Credential $cred -UseSsl -From 'NAME <e-mail>' -To 'NAME <e-mail>' -Subject 'Finished' -Body 'You can start installing again'

In my case after 72h the problem was not solved. I needed to create a ticked at Microsoft. The problem then was solved within an hour and the script did sent me a mail.
They told me it was a known bug.
I hope this will help you.

Rob

· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks!, I was trying on my own without success. I'll try your script.

0 Votes 0 ·
amanpreetsingh-msft avatar image
0 Votes"
amanpreetsingh-msft answered ·

Hi @AdministradorSistemas-7795,

As directory synchronization isn't activated or deactivated after 72 hrs, follow these steps, and then contact Microsoft Support:

Run below PowerShell cmdlets:

  • Connect-MSOLService

  • (Get-MSOLCompanyInformation).DirectorySynchronizationStatus

If the output is "PendingEnabled" or "PendingDisabled" after the expected enablement time period has passed, this is a known issue with Exchange Online.
Collect the following information from the Windows PowerShell connection:

  • Context ID: To collect the context ID, type the following cmdlet, and then press Enter:
    (Get-MSOLCompanyInformation).objectID

  • Service instance: To collect the service instance, type the following cmdlet, and then press Enter:
    (Get-MSOLCompanyInformation).AuthorizedServiceInstances


Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

· 6 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Many thanks for your help. I'll try to rise a tiket to Microsoft but in my tenant seems that only have support from my partner. Is there any other way to contact Microsoft Support, appart from Off365 admin portal?
Thanks in advance.

0 Votes 0 ·

Hi, when i try to subbmit a ticket, i cant, because i do not have pay support... Its correct?
Can you help me, please????

0 Votes 0 ·
Show more comments

Finally I can get suport from provider and they told me that MS is working on a fix for this.
The day after I rose the ticket, sync got disabled.

Thanks for your help.

0 Votes 0 ·