Troubleshooting Amazon Managed Microsoft AD
The following can help you troubleshoot some common problems you might encounter when creating or using your Amazon Managed Microsoft AD Active Directory.
Problems with your Amazon Managed Microsoft AD
Some troubleshooting tasks can only be completed by Amazon Web Services Support. Here are some of the tasks:
-
Restarting your Amazon Directory Service-provided domain controllers.
To create a support case, see Creating support cases and case management.
Problems with Netlogon and secure channel communications
As a mitigation against CVE-2020-1472
To verify if your issue is related to Netlogon or secure channel communications, search your Amazon CloudWatch Logs for event IDs 5827 (for device authentication related issues) or 5828 (for AD trust validation related issues). For information about CloudWatch in Amazon Managed Microsoft AD, see Enabling Amazon CloudWatch Logs log forwarding for Amazon Managed Microsoft AD.
For more information about the mitigation against CVE-2020-1472, see How to manage the changes in Netlogon secure channel connections associated with
CVE-2020-1472
You receive a 'Response Status: 400 Bad Request' error when attempting to reset a user's password
You receive an error message similar to the following when attempting to reset a user's password:
Response Status: 400 Bad Request
You may experience this issue when there are duplicate objects in your Amazon Managed Microsoft AD
Organizational Unit (OU) with identical user logon names. User logon names must be
unique. See Troubleshooting Directory Data problems
Password recovery
If a user forgets a password or is having trouble signing in to your Amazon Managed Microsoft AD directory, you can reset their password using either the Amazon Web Services Management Console, Windows PowerShell or the Amazon CLI.
For more information, see Resetting an Amazon Managed Microsoft AD user password.
Additional resources
The following resources can help you troubleshoot as you work with Amazon.
-
Amazon Knowledge Center
–Find FAQs and links to other resources to help you troubleshoot issues. -
Amazon Support Center
–Get technical support. -
Amazon Premium Support Center
–Get premium technical support.
The following resources can help you troubleshoot common Active Directory issues.