AD FS Setup Issue on 2012 R2 Domain Controller

2

I am trying to run the Add-KdsRootKey command on a 2012 R2 domain controller for AD FS setup and am receiving the following error:

Add-KdsRootKey : The specified domain either does not exist or could not be contacted. (Exception from HRESULT:
0x8007054B)
At line:1 char:1
+ Add-KdsRootKey
+ ~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Add-KdsRootKey], COMException
    + FullyQualifiedErrorId : The specified domain either does not exist or could not be contacted. (Exception from HR
   ESULT: 0x8007054B),Microsoft.KeyDistributionService.Cmdlets.AddKdsRootKeyCommand

I am attempting this command because the AD FS installation wizard is throwing an error:enter image description here

I have 2x 2012 R2 domain controllers as well as 2x 2008 R2 domain controllers. I was led to believe as long as one 2012 R2 controller was in the domain this would work.

I am not sure what steps to take at this point.

windows-server-2012-r2
adfs
asked on Server Fault Dec 2, 2015 by (unknown user)

1 Answer

1

Turns out the issue was specific to my environment (2008/2012 mix). Apparently the sysvol/netlogon shares were not replicating correctly causing all sorts of issues. I did the registry hack to set the BurFlags in order to force a reinitialization of the shares. I also transferred FSMO roles from the 2008 DC to one of the 2012R2 DCs. This seemed to help as well.

answered on Server Fault Dec 6, 2015 by (unknown user)

User contributions licensed under CC BY-SA 3.0