ADSync Events 6803, 6801, 106, 906, 6110, 6005, 6401

Question

Hi guys,

I was checking our AAD Server for events and found some warnings and errors regarding AD Sync. At least from my point of view everything is working, because when I create an account on-premises and then execute Delta sync over Powershell, then everything looks fine. Still, there are these events which bother me.

Event ID 6803

The management agent "domain.onmicrosoft.com - AAD" failed on run profile "Export" because the server encountered errors.

Event ID 6801

The extensible extension returned an unsupported error.

The stack trace is:

"System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The remote name could not be resolved: 'login.microsoftonline.com'

at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)

--- End of inner exception stack trace ---

Event ID 106

Failed to connect to Windows Azure Active Directory during export. Exception: System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The remote name could not be resolved: 'login.microsoftonline.com'

at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)

--- End of inner exception stack trace ---

Event ID 906

GetSecurityToken: unable to retrieve a security token for the provisioning web service (AWS). An error occurred while sending the request. | The remote name could not be resolved: 'login.microsoftonline.com'. extendedMessage: An error occurred while sending the request. | The remote name could not be resolved: 'login.microsoftonline.com'

webException: The remote name could not be resolved: 'login.microsoftonline.com'

STS endpoint: HTTPS://LOGIN.MICROSOFTONLINE.COM/DOMAIN.ONMICROSOFT.COM

Event ID 906

Authenticate-MSAL: exception details: System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The remote name could not be resolved: 'login.microsoftonline.com'

at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)

--- End of inner exception stack trace ---

Event ID 906

MSAL: False MSAL 4.36.0.0 MSAL.Desktop 4.8 or later Windows Server 2022 Datacenter [12/05 05:58:47.91 - c26f6466-fb48-4142-bb69-7f224cb30074] Exception type: System.Net.Http.HttpRequestException

---> Inner Exception Details

Exception type: System.Net.WebException

at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)

=== End of inner exception stack trace ===

Event ID 6110

The management agent "domain.onmicrosoft.com - AAD" step execution completed on run profile "Delta Import" but the watermark was not saved.

Additional Information

Discovery Errors : "0"

Synchronization Errors : "0"

Metaverse Retry Errors : "0"

Export Errors : "0"

Warnings : "0"

User Action

View the management agent run history for details.

Event ID 6005

The management agent "domain.onmicrosoft.com - AAD" failed on run profile "Delta Import" because of an unspecified management agent error.

Additional Information

%3

Event ID 6401

The management agent controller encountered an unexpected error.

"ERR_: MMS(3764): ..\memutils.cpp(7665): Failed to start run because of undiagnosed MA error

Azure AD Sync 2.3.6.0"

The server was already rebooted, updated, etc. everything looks pretty normal. Nslookup is working as well. I can't find useful information about this and how to solved. Does someone have an idea, what could be the problem and how to solve it?

Thanks in advance

Answer 1

@Borislav Vitanov

Thank you for posting this in Microsoft Q&A.

As I understand you are seeing some event ID warnings and errors in Entra connect server. However, from your side there is no issues with the sync service.

The errors and warnings that you are seeing are due to connectivity issues between Entra connect and Entra ID.

Looks like there are some intermittent issues with connectivity in your environment.

This might be due to multiple reasons, Firewall, proxy, some ports or URL are not allowed etc.

You can check below article and confirm if everything is looking good.

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/tshoot-connect-connectivity#troubleshoot-connectivity-issues-in-the-installation-wizard

Let us know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.