Symptoms
Horizon relies on API calls to the Active Directory to process jobs in a timely manner.Environmental Matters and Customization Issues can have varied causes, Please see these resources for additional context:
Troubleshooting Vmware Horizon Machines that do not complete Customization (83985) Horizon View Best Practices: Parent Image Creation and Maintenance. (90152)
Purpose
This KB is an index of several known AD_FAULT_FATAL error responses.
Be aware of the following updates that may have an impact on the customization process:
Impact of Microsoft security update (KB5020276) on Instant clones (92214)Impact of Microsoft security update (KB5008383) on Instant clones (92215)
Resolution
Transient Issues:
AD_FAULT_FATAL -LdapException$DnsException: Unable to DNS lookup for _ldap_tcp.dc_xxx using DNS provider(s) Instant Clone Creation Error (91068) This article outlines scenarios where DNS lookup failures impact Instant Clone operations and the options to remediate. AD_FAULT_RETRYABLE - unable to contact peer: unable to create connection pool Instant Clone Creation Error (91071) - This article outlines guidelines when you get a timeout during a domain controller connection attempt and guidelines to help remediate the issue.AD_FAULT_FATAL - resetComputerAccount: Fail to reset computer account Instant Clone Creation Error (92582) highlights a scenario involving a conflict with spn values.
Object Creation:
AD_FAULT_FATAL - unable to create connection pool Instant Clone Creation Error (2147129) - This article outlines options when Horizon auto-discovery of the domain site mechanism fails due to outside factors such as misconfigured DNS, sites and services or other reasons that you may not have direct control over.AD_FAULT_FATAL KDC has no support for encryption type (14) unable to create connection pool Instant Clone Creation Error (92285) outlines a scenario where a deprecated encryption method is still used by the Active Directory account associated with Provisioning.AD_FAULT_FATAL - createComputerAccount: Fail to create computer account Instant Clone Creation Error (91066) - This article outlines scenarios where computer account creation fails and the options to remediate.
Related Information
This is a child article of Horizon View Best Practices: Instant Clone Provisioning and Troubleshooting (91265)
