This post has been republished via RSS; it originally appeared at: New blog articles in Microsoft Tech Community.
Albert Einstein was famously quoted for saying that the definition of insanity is doing the same thing over and over again and expecting a different result. I was reminded of that during a recent Azure AD Connect installation that ran into a brick wall during the installation wizard. We kept trying over and over, knowing we were being thorough in our preparations for the installation. May thanks to Russ Tarr, a Principal Consultant at Microsoft with many years of experience troubleshooting everything Microsoft. He was instrumental in tracing this down to root cause for us in our troubleshooting session. There's no substitute for experience and I am sharing our experience with you. We hope this helps anyone experiencing the same issue.
The ProblemThe Azure AD Connect installation would get to the ADFS Service Account screen (shown below) but would not allow the installation to proceed. After restarting the installation process and walking through the steps several times, the process appeared to be in an infinite loop (see paragraph above). The screen below was the brick wall in the installation process. The account information was auto populated from the existing ADFS farm. The accounts specified throughout the installation wizard are all done in DOMAIN\User format. So what's going on here?
Digging Through the Logs
During the installation of Azure AD Connect, logs are created in the C:\ProgramData\AADConnect folder on the local machine and give a clue on the issue being experienced.
The Moment of ClaritySo, where is this coming from? In our case, the service account on the Active Directory Federation Services service was configured with the Log On account configured in UPN format. While this is perfectly valid for a service account as far as Windows is concerned, the Azure AD Connect installation has a problem with it.