Error configuring AD FS on windows 2016 server

Question

Error configuring AD FS on windows 2016 server

Janus Bariñan 1,056

I get an error when configuring ADFS for the first time. I search the internet and found only little information about this so I am posting for help here.

Manu Philip 14,366 Reputation points MVP

2020-05-20T04:28:22.077+00:00

Hello,

We need more details to troubleshoot the issue further like the steps you performed, logs, event viewer messages etc.. Meantime, check it again by disabling Windows Firewall

Thanks, Manu
ShashiShailaj-MSFT 7,431 Reputation points Microsoft Employee

2020-05-20T04:31:57.98+00:00

Could you please provide complete error and any events during this configuration?
Janus Bariñan 1,056 Reputation points

2020-05-20T04:47:17.057+00:00

Normal steps in configuring via Server Manager console. At the end of the configuration steps it says The server is not operational.

These are from event logs.
Manu Philip 14,366 Reputation points MVP

2020-05-20T05:05:33.687+00:00

Hello,

Although it reports a certificate issue, the root cause can be a permission also. So, first make sure that the certificate is fine. If you check event log, you may see messages like 'AD FS detected that all the service certificates have appropriate access given to the AD FS service account.'. This shows that certificate is fine.

Have you tried to install ADFS by domain account? Try installing with Local System Administrator account also and see if you are able to succeed

Thanks,
Manu
Janus Bariñan 1,056 Reputation points

2020-05-20T09:08:41.417+00:00

I See no logs pertaining to 'AD FS detected that all the service certificates have appropriate access given to the AD FS service account.' I tried installing using domain admin account and still same error. Also tried with account that is a member of the local admin of the server. I tried re-installing several times and I always get this error on MSSQL event ID 9645 (screenshot from the thread). Something about the sql broker. I'm confused since I am not using SQL. I am using WID.
Janus Bariñan 1,056 Reputation points

2020-05-20T09:19:15.593+00:00

already replied above.
Manu Philip 14,366 Reputation points MVP

2020-05-20T15:47:37.947+00:00

Hello @Janus Bariñan ,

Have you tried the Microsoft solution here: https://support.microsoft.com/en-us/help/2832204/mssql-microsoft-wid-service-was-unable-to-log-on-as-nt-service-mssql-m

Thanks,
Manu
Janus Bariñan 1,056 Reputation points

2020-05-21T01:17:29.837+00:00

Yes already did that. Even added both NT SERVICE\MSSQL$MICROSOFT##WID and NT SERVICE\ALL SERVICES and still get "The server is not operational"

Manu Philip 14,366 Reputation points MVP

2020-05-20T04:28:22.077+00:00

Hello,

We need more details to troubleshoot the issue further like the steps you performed, logs, event viewer messages etc.. Meantime, check it again by disabling Windows Firewall

Thanks, Manu
ShashiShailaj-MSFT 7,431 Reputation points Microsoft Employee

2020-05-20T04:31:57.98+00:00

Could you please provide complete error and any events during this configuration?
Janus Bariñan 1,056 Reputation points

2020-05-20T04:47:17.057+00:00

Normal steps in configuring via Server Manager console. At the end of the configuration steps it says The server is not operational.

These are from event logs.
Manu Philip 14,366 Reputation points MVP

2020-05-20T05:05:33.687+00:00

Hello,

Although it reports a certificate issue, the root cause can be a permission also. So, first make sure that the certificate is fine. If you check event log, you may see messages like 'AD FS detected that all the service certificates have appropriate access given to the AD FS service account.'. This shows that certificate is fine.

Have you tried to install ADFS by domain account? Try installing with Local System Administrator account also and see if you are able to succeed

Thanks,
Manu
Janus Bariñan 1,056 Reputation points

2020-05-20T09:08:41.417+00:00

I See no logs pertaining to 'AD FS detected that all the service certificates have appropriate access given to the AD FS service account.' I tried installing using domain admin account and still same error. Also tried with account that is a member of the local admin of the server. I tried re-installing several times and I always get this error on MSSQL event ID 9645 (screenshot from the thread). Something about the sql broker. I'm confused since I am not using SQL. I am using WID.
Janus Bariñan 1,056 Reputation points

2020-05-20T09:19:15.593+00:00

already replied above.
Manu Philip 14,366 Reputation points MVP

2020-05-20T15:47:37.947+00:00

Hello @Janus Bariñan ,

Have you tried the Microsoft solution here: https://support.microsoft.com/en-us/help/2832204/mssql-microsoft-wid-service-was-unable-to-log-on-as-nt-service-mssql-m

Thanks,
Manu
Janus Bariñan 1,056 Reputation points

2020-05-21T01:17:29.837+00:00

Yes already did that. Even added both NT SERVICE\MSSQL$MICROSOFT##WID and NT SERVICE\ALL SERVICES and still get "The server is not operational"

Error configuring AD FS on windows 2016 server

Activity