Diagnosing Horizon Edges - Active Directory Connectivity for Microsoft Azure Deployments

You can perform on-demand diagnosis on your Horizon Edges. Active Directory diagnosis is supported. If you detect a problem with Active Directory linked to the Horizon Edges, you can use the Horizon Universal Console to help diagnose the issue, especially on the Monitor > Diagnosis page. Next, you can go to the Active Directory configuration directly to determine what is preventing a proper connection and fix it.

You set up Active Directory for Microsoft Azure early in the deployment. See Active Directory Requirements and Setting up your Active Directory Domain - Horizon Cloud Service - next-gen. If a configuration problem exists with Active Directory, you can run a test from the Diagnosis page of the Horizon Universal Console that does the following.

Tests Active Directory (which can be one or multiple instances) connectivity to Horizon Edges.
Checks Domain credentials (primary domain, auxiliary domain, and SSO) of Active Directory.

Access the Diagnosis Page

After you detect an issue with Active Directory, visit the Diagnosis page for further investigation.

To access the Diagnosis page, in the Horizon Universal Console, select Monitor > Diagnosis.

Note: You can view historical information about Active Directory related errors on the Home > Horizon Edges with Infrastructure errors page. See Resource-Monitoring Data: Errors.

View the Diagnosis Page

The Diagnosis page lists all Active Directory instances found, if any.

When test groups (Active Directory instances) are listed, the following information is provided.

The name of each test group
The overall diagnosis status for a test group.
The overall diagnosis status provides an overview of the connectivity between the Active Directory and all the Microsoft Azure Edges. If one or more Microsoft Azure Edges is in an error state, the status appears as Error. To review the status of each Microsoft Azure Edge, you must expand the test group.

The Horizon Universal Console Diagnosis page with two test groups

Run Tests

On the Diagnosis page, you can run diagnosis tests on any of the listed test groups across all Microsoft Azure Edges.

Select the check box next to the name of the test group that you want to test.
Click Run Tests.
Tests run for each selected test group.

Review Active Directory Connectivity Results

On the Diagnosis page, you can review the status of each test group one at a time.

The following status descriptions are helpful in distinguishing the status types.

Success: Connectivity successful (no connectivity errors).
Error: Connectivity issues exist. The error message explains the exact cause of the error. Use the information in the error message to make the required changes to the Active Directory configuration.
Run failed: The test did not finish. Run the test again.

The Horizon Universal Console Diagnosis page with a test group selected, which displays the Active Directory status all the Horizon Edges in the test group, which is only one. The status for that one Horizon Edge is Error. The Error message is open.

Click the double arrow next to a test group that you want to review.
A pane opens that displays the diagnosis status for every Microsoft Azure Edge in that test group.
To review an error, click Error in the Status column for the Horizon Edge for which you want to reveal the error message.
Several different types of error messages exist. The following is an example of an error message about the primary bind account, which is an indication to check the credentials entered for the primary bind account: Error connecting to AD server using Primary Bind Account
Use the information provided in the error message to help you troubleshoot and fix the issue when you later access the Active Directory configuration.