Cannot delete AD connector, console

0

When I try to disable the console, it says, "You cannot disable the AWS Management Console because delegated users are still assigned to it. Remove all users and groups from the IAM roles below and try again."

When I click one of the roles it says, "The role 'EC2Admin' and 'EC2Developer' may have been deleted, or the role’s trust with AWS Directory Service no longer exists. Either recreate the role and then reassign your delegated users, or edit the trust to repair it.

How do I delete an inoperable AD connector?

1 個回答
1

Hello,

I understand that when you try to delete an inoperable AD connector within Directory Services of your AWS Management console, you get the following error message: “You cannot disable the AWS Management Console because delegated users are still assigned to it. Remove all users and groups from the IAM roles below and try again”.

Please note that when your AD connector switches to an inoperable state, your access to the domain controllers are blocked for security reason. We block the deletion of an AD Connector when there are still applications linked to it to prevent customers from unintentionally breaking an AWS application that is still using the directory.

You will need to submit a request with AWS Support and the support team will ask for specific account details so that they can assist with the deletion of the inoperable AD connector and to avoid being billed for an inoperable AD connector

Reference: [https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_connector_troubleshooting.html#delete_ad_connector]

Reach out to AWS Support : [https://aws.amazon.com/contact-us/]

*** If the answer is helpful, please click "Accept Answer" and upvote it. ***

Kind Regards,

Olu

AWS
Olu Ojo
已回答 4 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南