Trapper Posted November 23, 2015 Posted November 23, 2015 Anyone else had problems getting this to work? Everything I'm reading about the error I'm getting is related to the proxy. It connects fine to check my cloud credentials, but fails configuring. So far I have: * Set the DotNet 4.5 proxy in machine.config (and yes in the format of http://10.120.224.57:80" * Set the netsh proxy * Shouted at it alot * Kicked a nearby cat Has anyone got this to work?!
sparkeh Posted November 23, 2015 Posted November 23, 2015 Yeah working here. What exact bit does it fail at? I had to do a bit of tinkering to get it to work too. Also some discussion here: http://www.edugeek.net/forums/how-do-you-do/162160-office365-dirsync.html
Trapper Posted November 24, 2015 Author Posted November 24, 2015 Constantly fails at the configuration stage - cannot connect to Azure AD blah. I'm really not sure what I'm doing wrong ... during the setup it can connect and authenticate my cloud Global Administrator?!
sparkeh Posted November 24, 2015 Posted November 24, 2015 Yeah I had something similar. For me it was that it couldn't connect through our Smoothwall without making an authentication exception.
Trapper Posted November 24, 2015 Author Posted November 24, 2015 We just have the standard BGfL proxy with no auth turned on. That's why I'm getting horribly confused as to why it's not working. I'm sure they wouldn't disallow this to sell BGfL 365?! Nah, I've run Network Monitor and the traffic is getting through and handshaking fine.
timbo343 Posted November 24, 2015 Posted November 24, 2015 I got it working in the end, i was struggling with a violation error and it turned out to be permissions. What they dont tell you is the sync account needs to be a member of Domain Admins, Enterprise Admin and Administrators. Here is a list of sites which i have allowed through my smoothwall: *.microsoftonline.com *.windows.net +Certificate Revocation Lists : crl.microsoft.com evsecure-ocsp.verisign.com evsecure-aia.verisign.com evsecure-crl.verisign.com sa.symcb.com sd.symcb.com *.omniroot.com *.verisign.com *.symcb.com *.symcd.com *.verisign.net *.geotrust.com *.entrust.net *.public-trust.com
Trapper Posted November 24, 2015 Author Posted November 24, 2015 Managed to wangle all the group settings, and give the service account write back permissions (although I'm not doing that at the moment). I've deactivated AD Sync and will try after 72 hours again. It's possible that way, way back in the mists of time when this was a Live@Edu tenancy I played around with directory sync in the bad old days. It's possible some of that is re-appearing to bite me in the arse.
timbo343 Posted November 24, 2015 Posted November 24, 2015 Managed to wangle all the group settings, and give the service account write back permissions (although I'm not doing that at the moment). I've deactivated AD Sync and will try after 72 hours again. It's possible that way, way back in the mists of time when this was a Live@Edu tenancy I played around with directory sync in the bad old days. It's possible some of that is re-appearing to bite me in the arse. Have you thought about doing some testing with Directory (OU) filtering (https://msdn.microsoft.com/en-us/library/azure/dn801051.aspx - look for the heading Configure Organisational-unit-based filtering) for testing before rolling out to the whole school? Make sure sync in Task Scheduler is disabled first. Once you have set up the Synchronisation manager and things have moved across, run the sync in Task Scheduler.
timbo343 Posted November 24, 2015 Posted November 24, 2015 Yup definitely not a proxy issue! [ATTACH=CONFIG]33423[/ATTACH] Are you using express settings?
Trapper Posted November 24, 2015 Author Posted November 24, 2015 Using custom - but have tried Express. Have tried just my OU and entire AD all fail! Have also tried on a different server (2012 R2 vs 2008 R2 - production vs test rig)
timbo343 Posted November 24, 2015 Posted November 24, 2015 Just done a quick google an found this article.. it might help https://community.office365.com/en-us/f/613/t/277602
Trapper Posted November 25, 2015 Author Posted November 25, 2015 Ahhhh fixed! Turned directory sync off and back on.... Who says IT is purely restarting balky kit?! 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now