A "cd-error" error occurs in MIIS during directory synchronization to Azure Active Directory

Van toepassing: Azure Active DirectoryOffice 365 Identity Management

PROBLEM


During directory synchronization from your local Active Directory domain to Microsoft Azure Active Directory (Azure AD) for Office 365, "cd-error" is displayed on the Export Error tab of the Synchronization Service Manager in Microsoft Identity Integration Server (MIIS).

The following screen shot shows an example of the error display.

Screenshot of Synchronization Service Manager, showing the

Additionally, an event that contains the following description is logged to Event Viewer:
Executing export run profile on source MA failed for
System.ManagementPropertyData. Failed to export objects:
dn=<distinguishedName>


CAUSE


This issue typically occurs if the local Active Directory schema hasn't been prepared for Microsoft Exchange Server 2013. Exchange 2013 includes new attributes that aren't available in the Microsoft Exchange Server 2010 schema or earlier versions.

SOLUTION


Update the schema of your local Active Directory to Exchange 2013. After you do this, Exchange 2013-specific attributes are available, and directory synchronization can write the values to your local Active Directory domain.

Note If Exchange 2010 was previously installed in your on-premises environment, and you extend the schema to Exchange 2013, you will be able to install additional Exchange 2010 servers at a later time, if it is necessary. If you have never had Exchange 2010 running in your on-premises environment, and you extend the schema to Exchange 2013, you won't be able to install additional Exchange 2010 servers in your on-premises environment.

MORE INFORMATION


For more information about how to prepare the Active Directory schema for Exchange 2013, go to the following Microsoft websites:
Still need help? Go to Microsoft Community or the Azure Active Directory Forums website.