Azure AD Connect bug?

Question

Hello everyone,

We have encountered what I can only assume is a bug. Our Azure AD Connect is trying to connect to a SQL database using the machine name as user name, 'DOMAIN\MACHINENAME$'. Everything is working correctly except our SQL logs are getting spammed with failed logon errors. Anyone else experienced the same issue?

Found a similar post but no answer: https://learn.microsoft.com/en-us/answers/questions/9431/msdn-redirect-bug-azure-ad-connect-attempting-to-c.html

Best regards,
MJ

Answer 1

Hello, please, as a sysadmin (EG: sa user), run the following TSQL query in the target SQL Server.

   CREATE LOGIN [DOMAIN\MACHINENAME$] FROM WINDOWS WITH DEFAULT_DATABASE= master  
   GO  
   ALTER SERVER ROLE [dbcreator]   
   ADD MEMBER [DOMAIN\MACHINENAME$]  
   GO  

Alternatively and to keep a more tight access control, you can create the ADSync database out of band. For this you need to only create the login and grant it db_owner database permission.

Please let me know if you need more help. If the answer was helpful to you, please accept it and, optionally, provide feedback so that other members in the community can benefit from it.