Microsoft Azure AD Connect installation problem

Question

Excuse me, there is a problem about Microsoft Azure AD Connect installation.
The installation process is as follows:

1. Sign in as a local administrator to the server where install Azure AD Connect.
2. Find AzureADConnect.msi and double-click it.
3. On the Welcome screen, select the check box to accept the terms of the license and click Continue .
4. On the Easy Settings screen, click Use Easy Settings .
5. On the Connect to Azure AD screen, enter Azure AD global administrator username and password. Click Next .
6. On the Connect to AD DS screen, enter the user name and password for administrator account. Click Next .
7. Configuration of the Azure AD Sign In page.Custom field not validated.Select the check box at the bottom of the screen. Click Next .
8. On the Ready to configure screen, Click Install.

During the installation in step 8, an exception occurred. According to the prompt information on the installation screen,
System.Net.WebException had an exception and failed to parse 'login.microsoftonline.com',Azure AD Connect installation stopped.

Install environment:
Install OS environment:Windows 2019 GUI Server (Standard x64bit)
Microsoft Azure AD Connect Version:2.0.28.0
Internet:Normal access to other Internet servers
Install OS DNS:Finished with the correct settings
In addition, the attachment adds the installation log:[163792-trace-20211223-090323.log]

Answer 1

@He, Erchuang/何 二创 ,

Looking at the attached logs file, it appears that Azure AD connect failed to establish outbound internet connectivity via device context for Authentication and the AdminWebService endpoint, as shown in the screenshot below:

Are using any using an outbound proxy to connect to the internet? the above success response (200) may have come from the user context rather than device context, therefore request you to the following setting in the C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config file to update your outbound proxy details in case of outbound proxy using.

  <system.net>  
        <defaultProxy>  
            <proxy  
            usesystemdefault="true"  
            proxyaddress="http://<PROXYADDRESS>:<PROXYPORT>"  
            bypassonlocal="true"  
            />  
        </defaultProxy>  
    </system.net>  

In case if your proxy server requires authentication, the service account must be located in the domain. Use the customized settings installation path to specify a custom service account also the machine.config section should look like this:

<system.net>  
        <defaultProxy enabled="true" useDefaultCredentials="true">  
            <proxy  
            usesystemdefault="true"  
            proxyaddress="http://<PROXYADDRESS>:<PROXYPORT>"  
            bypassonlocal="true"  
            />  
        </defaultProxy>  
    </system.net>  

Hope this helps.

Answer 2

Check, if there is a firewall is blocking required connectivity/ports. Make sure that all the required ports are opened. Following reference will guide on opening the required ports:
https://learn.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-ports

Answer 3

Thanks for reaching out.

As @Manu Philip stated, this appears to be a connectivity issue; please confirm that the Azure AD Connect server has actual connectivity with the Proxy and Internet, and use PowerShell to determine if the proxy is accepting web requests or not. Run the following command in a PowerShell prompt:

Invoke-WebRequest -Uri https://login.microsoftonline.com/
Invoke-WebRequest -Uri https://adminwebservice.microsoftonline.com/ProvisioningService.svc

if the proxy is correctly configured, you should get a success status:

Hope this helps.

Refer to the following link to lean more : https://learn.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-connectivity#verify-proxy-connectivity

-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 4

I suggest you to check if the requirements are met using the PowerShell Script found here
https://www.powershellgallery.com/packages/AADConnect-CommunicationsTest/4.2.1

As you are trying to install in a stand alone server, domain controller parameter (-DCs parameter) should be specified while running the script

---

If the Answer is helpful, please click "Accept Answer" and upvote it