Azure Active Directory Connect (AADConnect) is the tool that connects your on-premises Active Directory to Azure Active Directory.
At the end of the setup there is a rather unhelpful message asking you to run
Translated to English this means. (also see Update 20/07/2016)
- Open PowerShell and set your execution policy to unrestricted.
- Change directory to
C:\Program Files\Microsoft Azure Active Directory Connect\AdPrep
- Supply values for the following parameters:
AdConnectorAccount: your AAD connector account.
AzureADCredentials: your credentials for Azure.
- If successful you should see
Initializing your Active Directory forest to sync Windows 10 domain joined computers to Azure AD.Configuration Complete
- As good practice, set your execution policy back to restricted.
This must be run from a computer that has the Active Directory module for Windows PowerShell and the AD DS Snap-Ins and Command-Line Tools installed.
Failure to have both options installed will result in two errors:
The first error is obvious.
The second is not quite so obvious, a dsacls.exe error is generated as the command line tooling is not installed.