Azure AD Connect not authenticating during upgrade

Jason Clarke 15 Reputation points
2024-07-23T10:52:05.5166667+00:00

Running an upgrade of the Azure AD Connect product to the latest version (2.3.20 - or something like that - latest version in July 2024) so I can migrate the service to a new server - but the upgrade fails on the "Connect to Azure AD" section.

Takes a little while to get to that as it is going through the motions of 'upgrading sync engine'. It then gets to the "Connect to Azure AD" where I provide the account for access.

The account is most definitely a global admin. I can also logon through a browser and complete the MFA process on the same server that I am getting this issue on.

I have tried to run the product via admin elevated cmd line with the /InteractiveAuth switch but the result is the same.

The failure is:

Unable to validate credentials due to an unexpected error. Restart Azure AD Connect with the /InteractiveAuth option to further diagnose this issue. (extendedMessage: An error occurred while sending the request. | The underlying connection was closed: An unexpected error occurred on a send. | Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host

WebException: The underlying connection was closed: An unexpected error occurred on a send. STS endpoint: HTTPS://LOGIN.MICROSOFTONLINE.COM/<MYDOMAIN>)

Any help would be greatly appreciated.

Thanks.

Jason

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,260 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Stijn van der Horst 20 Reputation points
    2024-07-24T00:17:00.3166667+00:00

    Please follow this article: https://video2.skills-academy.com/en-us/entra/identity/hybrid/connect/reference-connect-tls-enforcement#powershell-script-to-check-tls-12

    Reboot the server afterwards;).

    That fixed the issue for my server 2016 server.

    4 people found this answer helpful.
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.