https://ksfboa.com/tech/jacki/how-to-fix-azure-ad-connect-permission-issue-error-code-8344.html