Announcement

Collapse
No announcement yet.

Failed to Join workstation to Win2k3 DC

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Failed to Join workstation to Win2k3 DC

    when i try to join windows xp pro workstation to the DC (win2k3 std ed) I get the server failed to perform the requested operation.

  • #2
    Re: Failed to Join workstation to Win2k3 DC

    More information please:
    Are you on a LAN (cable or WiFi) or a VPN?
    What account are you using to join to the domain?
    What account are you logged onto the laptop with?
    Are you using the Wizard?
    Is there already a computer account?
    Where do you get the error, and exactly what text do you get?
    Is there anything in the server or client event logs?
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Failed to Join workstation to Win2k3 DC

      Are you on a LAN (cable or WiFi) or a VPN?
      LAN

      What account are you using to join to the domain?
      Administrator

      What account are you logged onto the laptop with?
      Administrator

      Are you using the Wizard?
      Yes

      Is there already a computer account?
      If you mean by the time I'm trying to connect to DC, yes it logs it into AD, but for some reason the whole registration process fails. The computer name appears but it'll be displayed with an x on it... so that means fail right?

      Where do you get the error, and exactly what text do you get?
      It authenticates the user, i can ping the dc, i can log on to the dc using previous accounts I've registered. I get an error after the computer registration to DC. the error says, the server failed to perform the said operation.

      I tried using the netdom join --- error message (access denied).


      Is there anything in the server or client event logs?
      one thing, LDAP_BIND failed.

      04/07 12:24:49 NetpLdapBind: ldap_bind failed on \\CTBHO: 81: Server Down
      04/07 12:24:49 ldap_unbind status: 0x0
      04/07 12:24:49 NetpSetDnsHostNameAndSpn: NetpLdapBind failed: 0x3a
      04/07 12:24:49 NetpJoinDomain: status of setting DnsHostName and SPN: 0x3a
      04/07 12:24:49 NetpJoinDomain: initiaing a rollback due to earlier errors
      04/07 12:24:49 NetpGetLsaPrimaryDomain: status: 0x0
      04/07 12:24:49 NetpManageMachineAccountWithSid: status of disabling account 'CTBGR$' on '\\CTBHO': 0x0
      04/07 12:24:49 NetpJoinDomain: rollback: status of deleting computer account: 0x0
      04/07 12:24:49 NetpLsaOpenSecret: status: 0x0
      04/07 12:24:49 NetpJoinDomain: rollback: status of deleting secret: 0x0
      04/07 12:24:49 NetpJoinDomain: status of disconnecting from '\\CTBHO': 0x0
      04/07 12:24:49 NetpDoDomainJoin: status: 0x3a

      Comment


      • #4
        Re: Failed to Join workstation to Win2k3 DC

        The red cros means the account is disabled.

        What happens if you remove the red cross by right clicking and select enable???

        Comment


        • #5
          Re: Failed to Join workstation to Win2k3 DC

          Have there been any changes to the user rights to remove / change the "join computers to domain" settings?

          I presume it is the domain admin account you use to actually join the computer with?
          Tom Jones
          MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
          PhD, MSc, FIAP, MIITT
          IT Trainer / Consultant
          Ossian Ltd
          Scotland

          ** Remember to give credit where credit is due and leave reputation points where appropriate **

          Comment


          • #6
            Re: Failed to Join workstation to Win2k3 DC

            Originally posted by Ossian View Post
            Have there been any changes to the user rights to remove / change the "join computers to domain" settings?
            i don't think so.

            Originally posted by Ossian View Post
            I presume it is the domain admin account you use to actually join the computer with?
            yes it is.


            -------------

            but here's the weird thing. i disabled firewall. and all is well in the world.

            i'd like to find out why. i guess i still need the windows firewall up so i may have to put it up again... but that would mean going back to this problem.

            i know its related to my earlier problem of IPSEC when i got an update from ms. problem is, i did all the work arounds (i.e. opening the ports etc) when i enable the ipsec service the nic locks the network.

            Comment

            Working...
            X