AD-Connnect - Could not load file or assembly 'Microsoft.Azure.ActiveDirectory.Connector

Question

Hello,

After the first configuration of AD Connect, I receive the following Error during the initila syncrhonization:

The server encountered an unexpected error:  
   
 "Could not load file or assembly 'Microsoft.Azure.ActiveDirectory.Connector, Version=1.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. Access is denied.  
  
   at System.Reflection.RuntimeAssembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, RuntimeAssembly locationHint, StackCrawlMark& stackMark, IntPtr pPrivHostBinder, Boolean throwOnFileNotFound, Boolean forIntrospection, Boolean suppressSecurityChecks)  
   at System.Reflection.RuntimeAssembly.InternalLoadAssemblyName(AssemblyName assemblyRef, Evidence assemblySecurity, RuntimeAssembly reqAssembly, StackCrawlMark& stackMark, IntPtr pPrivHostBinder, Boolean throwOnFileNotFound, Boolean forIntrospection, Boolean suppressSecurityChecks)  
   at System.Reflection.RuntimeAssembly.InternalLoadFrom(String assemblyFile, Evidence securityEvidence, Byte[] hashValue, AssemblyHashAlgorithm hashAlgorithm, Boolean forIntrospection, Boolean suppressSecurityChecks, StackCrawlMark& stackMark)  
   at System.Reflection.Assembly.LoadFrom(String assemblyFile)  
   at Microsoft.MetadirectoryServices.Impl.ScriptHost.InitializeWorker(InitializeArguments pArgs)  
  
InnerException=>  
Could not load file or assembly 'file:///C:\Program Files\Microsoft Azure AD Sync\Extensions\Microsoft.Azure.ActiveDirectory.Connector.dll' or one of its dependencies. Access is denied.  
  
InnerException=>  
none  
"  

The Service Account was created automatically during the setup.

Any idea how to solve it?

Thanks in advance

Alberto

Answer 1

Hi @astapelfeld,

You could follow the next guide. Verify accounts and permissions. You should run the setup run as administrator.

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissions

Azure AD Connect uses 3 accounts in order to synchronize information from on-premises or Windows Server Active Directory to Azure Active Directory. These accounts are:

• AD DS Connector account: used to read/write information to Windows Server Active Directory
• ADSync service account: used to run the synchronization service and access the SQL database
• Azure AD Connector account: used to write information to Azure AD

In addition to these three accounts used to run Azure AD Connect, you will also need the following additional accounts to install Azure AD Connect. These are:

• Local Administrator account: The administrator who is installing Azure AD Connect and who has local Administrator permissions on the machine.
• AD DS Enterprise Administrator account: Optionally used to create the “AD DS Connector account” above.
• Azure AD Global Administrator account: used to create the Azure AD Connector account and configure Azure AD.