HCW: Hybrid Agent failing to register

Denis Payne 166 Reputation points

The Office 365 Hybrid Configuration wizard gets to the Hybrid Agent Setup step.
The Hybrid Agent is downloaded and installed but then fails at the 'Register Hybrid Agent' step.

The HCW log from %userprofile%\AppData\Roaming\Microsoft\Exchange Hybrid Configuration\ has the below details:

2020.05.15 10:23:42.936 10333 [Client=UX, fn=SendAsync, Thread=20]
FINISH Time=369.0ms Results=Forbidden {
"error": {
"code": "NotAdminRoleNoEnoughCustomPermission_UnauthorizedAccess",
"message": "Unauthorized Access.",
"innerError": {
"request-id": "417ab366-86af-410f-9f5a-df7530b0d19c",
"date": "2020-05-15T10:23:42"

I have tried the below but the issue continues:

  • Uninstalled the Hybrid Agent then run the HCW again
  • Install the Hybrid Agent manuall and then run the HCW again

I don't see any issue with the Office 365 GLobal Admin credentials I am using, as I can logon to Office 365 using then and they are accepted in the first step of HCW.

Microsoft Entra
{count} votes

13 additional answers

Sort by: Most helpful
  1. Marc Gehri 26 Reputation points

    Sorry, I don't have an answer...
    Were you able to solve the problem? I just have the same

  2. Oli 1 Reputation point

    I'm having the same error today: NotAdminRoleNoEnoughCustomPermission_UnauthorizedAccess
    Did you find a solution? I couldn't find anything about this error in the internet.

  3. Daniel Sullivan 1 Reputation point

    Like others, I started having this issue Friday for no reason I could identify.

    Running HCW the previous day was getting past this step just fine. I'm a little confused as to what has changed.

    The only change I personally have made is changing the Exchange Auth cert as the wizard was falling to complete the setup of OAuth but now I can't even get that far and I dont see why the auth cert would have this affect.

    0 comments No comments

  4. Jorge Rodriguez 1 Reputation point

    Hi, this problem started on may the 14th, I've been from this day trying to install the agent with no luck, and until I came here I was driving crazy because I believed it was a problem with my account.

    What's the difference between installing the agent and not installing it? I need to migrate some mailboxes in a controlled way, some are going to be migrated but not others.