Failed to create AzureadKerberos (Cloud Kerberos Trust)‎

Question

We are trying to establish cloud Kerberos trust to enable WHFB in our environment. However, it is giving below error.

It gives error at command Set-AzureADKerberosServer. Any advise and suggestion will be highly appreciated.

We have followed below link and commands.

 

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust?tabs=intune

 

1. install Required Module

 

Install the AzureADHybridAuthenticationManagement PowerShell module.

Install-Module -Name AzureADHybridAuthenticationManagement -AllowClobber

 

1. Setup Azure AD Kerberos server

 

Specify the on-premises Active Directory domain. A new Azure AD

Kerberos Server object will be created in this Active Directory domain.

$domain = $env:USERDNSDOMAIN

 

Enter an Azure Active Directory global administrator username and password.

$cloudCred = Get-Credential -Message 'An Active Directory user who is a member of the Global Administrators group for Azure AD.'

 

Enter a domain administrator username and password.

$domainCred = Get-Credential -Message 'An Active Directory user who is a member of the Domain Admins group.'

 

Create the new Azure AD Kerberos Server object in Active Directory

and then publish it to Azure Active Directory.

Set-AzureADKerberosServer -Domain $domain -CloudCredential $cloudCred -DomainCredential $domainCred