Entrea Sync

Question

Failed to retrieve schema.<error><error><incident><connection-result>failed-authentication</connection-result><date>2025-05-04 14:26:32.166</date><server>gabuttomarket.it:389</server><cd-error><error-code>0x31</error-code>

<error-literal>Invalid Credentials</error-literal>

</cd-error></incident></error></error>

Exception Data (Raw): System.Management.Automation.CmdletInvocationException: Failed to retrieve schema.<error><error><incident><connection-result>failed-authentication</connection-result><date>2025-05-04 14:26:32.166</date><server>gabuttomarket.it:389</server><cd-error><error-code>0x31</error-code>

<error-literal>Invalid Credentials</error-literal>

</cd-error></incident></error></error> ---> Microsoft.IdentityManagement.PowerShell.ObjectModel.SynchronizationConfigurationValidationException: Failed to retrieve schema.<error><error><incident><connection-result>failed-authentication</connection-result><date>2025-05-04 14:26:32.166</date><server>gabuttomarket.it:389</server><cd-error><error-code>0x31</error-code>

<error-literal>Invalid Credentials</error-literal>

</cd-error></incident></error></error>

at Microsoft.DirectoryServices.MetadirectoryServices.UI.WebServices.MMSWebService.GetSchemaFromDirectory(Connector connector, Boolean commit)

at Microsoft.IdentityManagement.PowerShell.Cmdlet.UpdateADSyncConnectorSchemaCmdlet.ProcessRecord()

Answer 1

Hi, see some troubleshooting steps here:

https://learn.microsoft.com/en-us/answers/questions/1167444/i-tried-to-upgrade-version-of-azure-ad-connect-too

Answer 2

Hi @Admin Cloud
I understand that you are facing the "Failed to retrieve schema." error while trying to upgrade Azure AD Connect. It might be insufficient privileges to your on-prem account make sure you are having the valid Enterprise Admin credentials when you "connect to AD DS. If you are using the correct Enterprise Admin credentials for local AD, it might be the password expired, or someone change the password for connecter account try the following steps to resolve this issue

• On your AD connect server Go to the synchronization service manager, if it is not opening, from RUN go to "C:\Program Files\Microsoft Azure AD Sync\UIShell" then go to Start miisclient.exe
• If the password expires you need to reset the password for the connecter account which is shows under properties.
• Once you have the user ID and password, follow to change the AD DS connector account password
• If this is not work, make sure the connecter account you are using is a member of the Domain Admins group.
• verify that you have enabled TLS 1.2 in the .Net Framework settings
• Once complete all the process run the synchronization and see the sync is working if everything works find continue to upgrade Entra Connect.

Hope this helps. If you still do not see enough information to isolate the issue, please let me know in the comment section.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.