25,177 questions
All sorted thanks. Unbeknown to me, but it was a dodgy server build that had obviously had a previous failed install. Built a new clean server and install went through as expected.
Entra Connect Health error - installation failed for your microsoft entra connect health agent
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 99%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES8%3C/text%3E%3C/svg%3E)
SteveH-8889
0
Reputation points
Trying to build new 2022 swing servers to install latest version of entra connect on, but the entra health agent keeps failing to install (not even installing local health files on server) with the error message "installation failed for your microsoft entra connect health agent".
Yes we have azure P1
Yes the acct I'm using is a GA
Yes have checked the firewall
No cannot try Test-AzureADConnectHealthConnectivity -Role Sync, as above local health files not installed, so no ps commands available
TLS 1.2 is ok
have tried multiple versions, old (but not eol) & new inc. latest (2.3.8.0, 2.3.20.0, 2.4.27.0 & 2.4.129.0) and all same problem
Cannot see anything about why health has failed to install in the logs, any help would be appreciated please. Thanks
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Other
2,605 questions
{count} votes
-
Deleted
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2025-01-17T02:05:05.9133333+00:00 Hello @SteveH-8889
Thank you for posting your query on Microsoft Q&A.
Test-AzureADConnectHealthConnectivity -Role Synccommand to see if you are successfully able to connect to the required endpoints.- Run below command and see if you are getting http 403 forbidden or not, as per below snip:
- If you are using Proxy to connect to internet, set proxy using
Set-AzureAdConnectHealthProxySettings -HttpsProxyAddress address:portcmdlet. - If you still face the same issue, update C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config file with
below parameters
- I would suggest you validate these TLS/SSL certificate requirements: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-prerequisites#tlsssl-certificate-requirements.
Test Connectivity is failing at step 2. For successful installation of health agent, all 3 steps should complete successfully. Test connectivity usually fails if AD Connect server is failing to connect with the required endpoints.
I would suggest you check the requirements and connectivity to the required Azure service endpoints mentioned in below document. Make sure any outbound traffic to these endpoints are not being blocked by your corporate firewall:
- https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-health-agent-install#requirements
- https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-health-agent-install#outbound-connectivity-to-the-azure-service-endpoints.
Best regards,
Sakshi Devkante
- Run below command and see if you are getting http 403 forbidden or not, as per below snip:
-
SteveH-8889 0 Reputation points
2025-01-17T08:43:19.64+00:00 Hello Sakshi Devkante
Thank you for your suggestions, but you obviously did not read the above thoroughly.
I said I cannot run "Test-AzureADConnectHealthConnectivity -Role Sync", as it has not even installed the local "c:... entra health" directory onto the server, meaning those commands do not exist.
- Comes back status 200 OK
- Not using a proxy
- Not using a proxy
- The server is 2022, so tls1.2 is already installed and enabled and we're not using adfs,
No issues or restrictions with firewall rules.
-
Anonymous
2025-01-17T18:34:18.07+00:00 Hello Steve
It would be very appreciated if you could look at the event viewer application log while installing Azure AADConnect health and provide us with the application code. Could you please let me know if this is a fresh installation or if an older version is already installed? I am posing those questions because I need to investigate more to be sure of a few things.
Best regards,
Sakshi Devkante
-
Anonymous
2025-01-20T18:56:24.28+00:00 Hello Steve
I am following up to see if you could provide me with the information mentioned above in the comment section, I need to investigate more to be sure of a few things.
Best regards,
Sakshi Devkante
-
Anonymous
2025-01-21T18:43:37.4666667+00:00 Hello Steve
I am following up to see if you could provide me with the information mentioned above in the comment section, I need to investigate more to be sure of a few things.
Best regards,
Sakshi Devkante
Sign in to comment