microsoft / aad-hybrid-lab Goto Github PK

Hello,

I'm having issues deploying this template, when I try deploying it the azure portal is throwing the error below.

I believe it's because the VM doesn't have access to anything external, because when i try to access anything in the browser on the vm it throws an unable to connect error in the browser.

See the error below.

{
    "code": "DeploymentFailed",
    "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-debug for usage details.",
    "details":
    [
        {
            "code": "Conflict",
            "message": "{ 
				"status": "Failed", 
				"error": { 
						"code": "ResourceDeploymentFailure", 
						"message": "The resource operation completed with terminal provisioning state 'Failed'.", 
						"details": [ { 
							"code": "VMExtensionProvisioningError", 
							"message": "VM has reported a failure when processing extension 'Microsoft.Powershell.DSC'. Error message: "The DSC Extension failed to execute: Error downloading https://raw.githubusercontent.com/Microsoft/aad-hybrid-lab/master/aad-hybrid-lab/DSC/adDSC.zip after 29 attempts: The remote name could not be resolved: 'raw.githubusercontent.com'.More information about the failure can be found in the logs located under 'C:\WindowsAzure\Logs\Plugins\Microsoft.Powershell.DSC\2.80.0.0' on the VM."." 
						} 
					] 
				}
			}"
        }
    ]
}

There are important files that Microsoft projects should all have that are not present in this repository. A pull request has been opened to add the missing file(s). When the pr is merged this issue will be closed automatically.

Microsoft teams can learn more about this effort and share feedback within the open source guidance available internally.

Merge this pull request

Had to manually add registry keys for TLS in order to prevent errors. Added the following to the DC server.

New-Item -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Force
Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Name 'DisabledByDefault' -Value '0' -Type DWord
Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Name 'Enabled' -Value '1' -Type DWord

New-Item -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Force
Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Name 'DisabledByDefault' -Value '0' -Type DWord
Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Name 'Enabled' -Value '1' -Type DWord

Alter to use new version of powershell Az.

Sorry for posting this under issues but I wasn't sure where else to ask this.

Are you able to connect a local Active Directory with Azure Active Directory just using these scripts ? I need to automate the full install process of AzureADConnect.msi and this repository seems to be the closest thing I could find.
Thank you!