Azure AD Connect Stopped Syncing

Carl John Gabato 1 Reputation point
2021-10-21T21:55:04.64+00:00

Our Local AD has stopped syncing with our AzureAD.
Last synchronization was on Oct 16
142478-image.png

So based on what was recorded, I'm thinking that the cause was the Export "stopped-extension-dll-exception"
I've read this article https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/directory-sync-stop-register#cause for the likely cause..
I verified all of the causes mentioned by myself aside from the network connection issues since there's a different team managing that.

So on the Oct 18 (monday) I issued a Full Sync, to see if that fixes things, but until now it hasn't completed. I checked it's progress by issuing a Delta Sync to see if it would succeed and confirm the Full Sync is completed.

What actions should we take to make AD Sync work again?
Thanks in advance for any suggestion.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

2 answers

Sort by: Most helpful
  1. AHMED ISMAIL 5 Reputation points
    2024-09-09T13:17:54.7266667+00:00

    For me, I had the same error, I enabled TLS1.2 and things start to function.
    refer to the following reference to use powershell script to check and another script to enable TLS1.2
    https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/reference-connect-tls-enforcement#powershell-script-to-check-tls-12

    1 person found this answer helpful.
    0 comments No comments

  2. Siva-kumar-selvaraj 15,721 Reputation points
    2021-10-22T09:51:56.543+00:00

    Hello @Carl John Gabato ,

    Thanks for reaching out and appreciate your time and effort in trying out all recommend suggestion from above article.

    Could you please confirm version of Azure AD connect ? also do you see Event ID: 6801 with stack trace error similar to below from server application event? if so then create an antivirus exception for __PSScriptPolicyTest*.* files or best approach and recommended way is to upgrade to latest version (1.6.16.0 or 2.0.28.0) of the AAD Connect which must fix the issue.

    Log Name:      Application  
    Source:        ADSync  
    Date:          7/23/2021 6:20:44 PM  
    Event ID:      6801  
    Task Category: Server  
    Level:         Error  
    Keywords:      Classic  
    User:          N/A  
    Computer:      AADConnect1.Contoso.com  
    Description:  
    The extensible extension returned an unsupported error.  
    The stack trace is:  
     "System.TypeInitializationException: The type initializer for 'System.Management.Automation.Runspaces.InitialSessionState' threw an exception. ---> System.UnauthorizedAccessException: Access to the path 'C:\Users\AAD_59981488013c\AppData\Local\Temp\__PSScriptPolicyTest_w3vu1uah.v0y.ps1' is denied.  
       at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)  
       at System.IO.File.InternalDelete(String path, Boolean checkHost)  
       at System.Management.Automation.Security.SystemPolicy.GetAppLockerPolicy(String path, SafeHandle handle)  
       at System.Management.Automation.Security.SystemPolicy.GetLockdownPolicy(String path, SafeHandle handle)  
       at System.Management.Automation.Security.SystemPolicy.GetSystemLockdownPolicy()  
       at System.Management.Automation.Runspaces.InitialSessionState..cctor()  
       --- End of inner exception stack trace ---  
       at System.Management.Automation.Runspaces.InitialSessionState.CreateDefault()  
       at Microsoft.Online.Deployment.PowerShell.PowerShellAdapter.GetInitialSessionState(String[] moduleNames)  
       at Microsoft.Online.Deployment.PowerShell.PowerShellAdapter.get_InitialSessionState()  
       at Microsoft.Azure.ActiveDirectory.Synchronization.PowerShellConfigAdapter.ConnectorConfigAdapter.GetConnector(Guid connectorIdentifier)  
       at Microsoft.MetadirectoryServices.Scheduler.ConnectorInformation.TryGetAzureActiveDirectoryConnector(Connector& connector)  
       at Microsoft.MetadirectoryServices.Scheduler.ConnectorInformation.GetAzureActiveDirectoryConnectorName()  
       at Microsoft.Azure.ActiveDirectory.Connector.DirSyncConfigurationAdapter.TypeDependencies.PopulateCloudExportData(CloudDirSyncConfiguration config)  
       at Microsoft.Azure.ActiveDirectory.Connector.DirSyncConfigurationAdapter.SendExportData()  
       at Microsoft.Azure.ActiveDirectory.Connector.AADConnector.OpenExportConnection(KeyedCollection`2 configParameters, Schema schema, OpenExportConnectionRunStep openExportConnectionRunStep)  
    Azure AD Sync #.#.#.#"  
    

    If non of these match your scenario and don't see Event ID: 6801 with stack trace error then would recommend you to reach out to MS support as this would require active troubleshooting and if you don't have support plan then I can help you with one-time free support.

    Hope this helps.

    ------
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.