Microsoft Entra Domain Services provisioning fails in two regions after clean portal deployments

Robert Castles 31 Reputation points
2026-09-02T01:52:35.8233333+00:00

Tenant ID: f13a93c0-dc63-4489-96f6-a3dc5dcd1d53 Subscription ID: 6ffdb3fd-2e5c-4707-a334-3a2ec6601ff1 Managed domain: g7294.onmicrosoft.com

Microsoft Entra Domain Services provisioning fails after portal-only Standard SKU deployments in both East US 2 and East US. The resource creation operation initially reports success, remains Deploying for hours, then the managed domain resource changes to Failed.

The East US deployment used a newly created VNet/subnet and default AAD DS NSG. Configuration diagnostics reported the subnet as OK. Health reports no alerts, but Overview reports Failed. Resource diagnostic settings expose domain audit categories only and do not show provisioning-controller errors.

Relevant correlation IDs:

  • East US 2 portal attempt: 08d8f411-6b42-48dc-b561-e8a15b6951c1
  • Earlier East US attempt: 4a6ba948-1272-4639-9f65-deab9986e686

Please investigate the backend AAD DS provisioning failure for this tenant/subscription and advise whether a tenant or Azure Developer Program restriction is preventing managed-domain creation.

Microsoft Security | Microsoft Entra | Other
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.