ADUC doesn't work on Entra Joined AVD

Question

Hi Guys,

I hope you are all well.

I am trying to run Active Directory Users and Computers on AVD. After some modifications of installations script I was able to install it but not running. Here are sample command lines that I tried:

C:\Windows\System32\runas.exe /netonly /user:username@ domain "mmc %SystemRoot%\system32\dsa.msc"

error: 740: The requested operation requires elevation.

C:\Windows\System32\runas.exe /netonly /user:domain\username "mmc %SystemRoot%\system32\dsa.msc"

error: 1348: The validation information class requested was invalid.

runas /user:username@domain "c:\windows\system32\mmc.exe %SystemRoot%\system32\dsa.msc /domain:domainname

1326: The user name or password is incorrect.

runas /user:domain\username "c:\windows\system32\mmc.exe %SystemRoot%\system32\dsa.msc

1326: The user name or password is incorrect.

AVD is connected with on-premises infr using global protect - I am able to reach servers, shares etc. To AVD config I have added domain suffixes.

What I missed?

Thank you and best regards,

Damian

Answer 1

Hello

Thank you for posting in Q&A forum.

1.Error 740: The requested operation requires elevation

•This error usually indicates that the command needs to be run with elevated (administrator) privileges. Try running the command prompt as an administrator and then executing the runas command.

2.Error 1348: The validation information class requested was invalid

•This error can occur if there's an issue with the domain name or user account. Ensure that the domain name and username are correctly specified and that the domain is reachable.

3.Error 1326: The username or password is incorrect

•This error indicates a problem with the credentials. Double-check the username and password, and make sure they are correct. Also, ensure that the account has the necessary permissions to perform the operation.

Here are a few steps you can try to resolve these issues:

1.Run Command Prompt as Administrator:

•Right-click on the Command Prompt and select "Run as administrator." Then try running the runas command again.

2.Verify Domain and Credentials:

•Double-check the domain name and username. Make sure they are correct and that the domain is reachable.

3.Check Permissions:

•Ensure that the user account has the necessary permissions to run the ADUC tool.

4.Use PowerShell:

•You can also try using PowerShell to run the command. Open PowerShell as an administrator and try running the command from there.

5.Disable User Account Control (UAC):

•If UAC is causing issues, you can try disabling it temporarily to see if it resolves the error. Go to Control Panel > User Accounts > User Accounts > Change User Account Control settings and set it to "Never notify."

Best regards

Yanhong

=====================================

If the answer is helpful, please click "Accept answer" and upvote it

Answer 2

Thank you for your answer.

I tried to do some troubleshooting.

All DCs are pingable.

When I add particular DC to ADUC it seems to be online but when I click OK, then I receive error that username or password are incorrect.

DCDIAG to mentioned DC ends with error 1326.

That is for AVD with user username@domainname

User has necessary permissions.

Powershell command also ends with errors.

Disabling UAC doesn't fix an issue.

When I run the same but using account: domain\username for the same user on hybrid joined machine then it works.

Any other ideas?

Best regards,

Damian

Answer 3

I try to use: Windows Admin Center. It connects to DC, I am able to see some configuration but when I try to use Active Directory it just loading ...