Can't create a user in AzureAD.

Question

Dear Team,

I have recently encountered an issue with the Active Directory (AD) hosted on an Azure VM. While attempting to create a new user in AD, I unexpectedly ran into an issue that is preventing me from completing the task. Unfortunately, I do not have an Additional Domain Controller (ADC) in place, which is complicating the situation.

I would greatly appreciate your support in resolving this issue, as I am currently unable to create any new users in AD.

Thank you in advance for your assistance.

Answer 1

Hello,

Your issue seems to be related to the FSMO role RID master, if your domain controller (DC) in Azure is not the only DC in your domain you should check if this DC can contact the other DCs.

After that you can find which DC is the RID master in your domain with this command:

Get-ADDomain | Select-Object RIDMaster

or

netdom query fsmo

And test network connectivity from the DC you have the issue to the RID master via PowerShell Cmdlet

Test-NetConnection

And test network connectivity from the DC you have the issue to the RID master via PowerShell Cmdlet Test-NetConnection on the standard port of DC (Server port column):

https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/config-firewall-for-ad-domains-and-trusts#more-information

Regards,