We help IT Professionals succeed at work.

Azure Ad connect sync for On-Prem and Azure.

I get this topleveldomain error.I am in the process of installing Azure AD Connect, i want to link my On-Prem Ad to Azure Ad cos i want to move users to Azure and office 365. I am working on a Hybrid setup.  As a prerequisite to the set up. I downloaded Idfix, to help with my current AD structure. After running Idfix, i got lots of errors. i attached the error i got from a single user. Please i need help on correcting the error before syncing both ADs.
Comment
Watch Question

Andy MIT Systems Manager
CERTIFIED EXPERT

Commented:
There doesn't appear to be anything attached to your question.
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
No attachment
Eromonsele EboiyehiNetwork Support Analyst

Author

Commented:
My Bad, Please find the error attached.
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
A top level domain error usually means the account doesn't have a valid domain that can be synced to O365. Any internal-only domain would have this issue, cmsich as dot-local (popular because of SBS, for example.)

You have to change the account UPN to sync those and that can have a user impact so it should be planned and communicated.
Eromonsele EboiyehiNetwork Support Analyst

Author

Commented:
How can i effect that change?
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
Create a UPN suffix that matches an authenticated domain in Azure AD.  Then you can use IDFix to change accounts en-masse.  I'd recommend doing a test account or two and communicating the change to users who may be impacted.
Mitul PrajapatiIT Supervisor
CERTIFIED EXPERT
Commented:
If it is a local domain (example; test.local), then it is called non routable domain and Azure AD works with routable domain only. You need to create UPN suffix in here. To do so, go to Active directory computer and trust and create one (example; test.com, A routable domain). Change all the user suffix from user@test.local to user@test.com and then run the ID fix tool again.

Check this link: https://docs.microsoft.com/en-gb/office365/enterprise/prepare-a-non-routable-domain-for-directory-synchronization?redirectSourcePath=%252fen-us%252farticle%252fHow-to-prepare-a-non-routable-domain-such-as-local-domain-for-directory-synchronization-e7968303-c234-46c4-b8b0-b5c93c6d57a7

Hopefully, this will help you out.
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
Soinds line you skipped one or more prerequisites so the script is failing.

https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-prerequisites
Eromonsele EboiyehiNetwork Support Analyst

Author

Commented:
when i run IdFix i get new less errors,  under ATTRIBUTE i see Proxy Addresses. find below in the screenshot.
0022.PNG
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
It's increasingly evident to me that you haven't read the documentation for AADConnect and may also not have the experience required for a successful deployment.  You may want to consider hiring a consultant on this project to ensure you have a clean and successful launch.  Forums are good for single one-off "I'm lost" type of sticking points, but are not well suited to advanced in-depth project management that seems to be required here.  Many experts make their living by providing such services and are not inclined to give away such services for free here.
IT Supervisor
CERTIFIED EXPERT
Commented:
Hi,

Please check the document i have attached for you. Hopefully this will help you to understand the error.
azure-AD.docx
Eromonsele EboiyehiNetwork Support Analyst

Author

Commented:
@Mitul Prajapati, Thanks for your help. I have added 300 users to my Azure AD account and its working perfectly. @Cliff Galiher, if you don't have a solution, i advise you keep your coments yo yourself.
Mitul PrajapatiIT Supervisor
CERTIFIED EXPERT

Commented:
I am glad to hear that your problem is fixed now.