Question

Cannot Join Domain

Asked by: jpertchik

I usually setup a new install or XPSP3 as part of a work group to start, and then join it to the domain through the properties>computername>Change dialog.

I put in the domain name, it asks for credential,s and a few seconds later it says Welcom to <domain name>

I have a situation now where I'm trying to join a fresh install to the domain, and then it just hangs with the hour glass for a long time after i put in my credentials. I've repeated it with different Admin accounts and still the same thing. The attached screen cap is the error I finally get.

Changes recently made to the server recently are as follows:
Transfered FSMO Roles over from older DC
Synchronised server with Internet based clock.
Synchronised Each client with the same clock.
Microsoft update last night, needs reboot.
We are running Windows XP Clients and the DC in question is Windows Server 2003 R2

Please help!

Thanks,

JPertchik

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-04-17 at 06:08:56ID24331585
Topics

Active Directory

,

Windows 2003 Server

Participating Experts
5
Points
0
Comments
38

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. FSMO roles
    I have a Windows 2000 DC that I will be demoting in the very near future, like in the next week or so. It is also a print server as well. We are a very small shop so my DC's are often performing addtional roles. I believe I know the answer to this, but if I demote this server...
  2. Transferring FSMO roles.
    Hello, Just a quick question. Is there a particular order in which I should transfer FSMO roles? I'm looking at http://support.microsoft.com/kb/324801 and it starts with Schema Master and continues on. Just wanted a second opinion before I moved on.
  3. FSMO Roles?
    Hi, I know the FSMO roles but need some details on what they are and how they are used. FSMO Roles? Flexible Single Master Operation Roles 1. Domain Naming Master  Forest Wide Roles 2. Schema Master  Forest Wide Roles 3. RID Master  Domain Wide Roles 4. PDC Emulator  ...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: cmorffewPosted on 2009-04-17 at 06:13:11ID: 24167364

what license model is the server running?

 

by: jpertchikPosted on 2009-04-17 at 06:33:12ID: 24167545

nt sure what you mean... we're taking seats, yes?

 

by: jpertchikPosted on 2009-04-17 at 06:33:51ID: 24167552

Sorry, i have a really lousy keyboard on mt LT

 

by: bluntTonyPosted on 2009-04-17 at 06:36:48ID: 24167589

Some questions for troublehsooting...

How many DCs do you have now? When you say you've sync the clients with the same clock, do you mean the internet time source? You should be syncing clients with your networks internal time source, typically your PDC emulator, which in turn can either use an external source or it's own internal clock.

Is DNS correctly configured on the client to look at the new DC? Is DNS up and running on this DC? Are the DCs DNS records (Host and SRV) registered correctly on the DC (try stop/starting the NETLOGON service on the DC to re-register them).

Have you successfully joined any clients to the domain since making your changes? Is the network traffic getting through to the new DC (try disabling windows firewall on the DC).

 

by: jpertchikPosted on 2009-04-17 at 06:36:48ID: 24167590

Windows Server 2003 Client Access License (Windows CAL)

 

by: aligigiPosted on 2009-04-17 at 06:38:03ID: 24167598

It could be a dns problem. On your winXP computer network properties the dns server should be your domain controller's IP.
Is the dns on the domain controller set up correctly?

 

by: bluntTonyPosted on 2009-04-17 at 06:42:47ID: 24167648

Further to this, ensure that DNS is not holding any SRV records referring to the old DC, if you have now removed this from the network. If you removed it, did you successfully DCPROMO it before disconnecting it?

 

by: jpertchikPosted on 2009-04-17 at 06:43:33ID: 24167658

Screen Cap on server licenseing

 

by: cmorffewPosted on 2009-04-17 at 06:44:43ID: 24167668

jpertchik,
check your DNS settings:

on the machine you are having issues connecting to the domain - run from command prompt - ipconfig /all

make sure the machine has a valid IP address and the settings look correct for your domain.

 

by: jpertchikPosted on 2009-04-17 at 06:44:50ID: 24167670

All i did was transfer the roles. I did not Demote it.

 

by: cmorffewPosted on 2009-04-17 at 06:45:24ID: 24167674

Ok - Licensing should not be an issue.

 

by: jpertchikPosted on 2009-04-17 at 06:47:23ID: 24167696

All is as it should be IP wise:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Setup>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : jpertchik
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : owprnetwork.local
                                            hsd1.va.comcast.net

Ethernet adapter Local Area Connection 2:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
        Physical Address. . . . . . . . . : 00-10-18-0C-3F-16
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.1.145
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.1.1
        DHCP Server . . . . . . . . . . . : 192.168.1.1
        DNS Servers . . . . . . . . . . . : 192.168.1.15
                                            192.168.1.14
        Lease Obtained. . . . . . . . . . : Friday, April 17, 2009 9:36:31 AM
        Lease Expires . . . . . . . . . . : Friday, April 17, 2009 10:36:31 AM

Ethernet adapter Wireless Network Connection 2:

        Media State . . . . . . . . . . . : Media disconnected
        Description . . . . . . . . . . . : Compact Wireless-G USB Network Adapt
er
        Physical Address. . . . . . . . . : 00-23-69-0E-E2-29

C:\Documents and Settings\Setup>

 

by: jpertchikPosted on 2009-04-17 at 06:49:04ID: 24167718

I'm worried about the time server issue. I did sync all m,achines in the domain to an external internet server. Not the DCF and then all clients to the DC

 

by: jpertchikPosted on 2009-04-17 at 06:50:39ID: 24167734

In other words, Heirarchical daisy chain from Internet source to DC, to client.

I have everyone synched directly to the internet seerver

 

by: cmorffewPosted on 2009-04-17 at 06:57:40ID: 24167807

run this on the machine
w32tm /monitor

it will tell you where it is getting the time from

 

by: cmorffewPosted on 2009-04-17 at 06:58:21ID: 24167817

you should really have it set to get the time from the DC and the DC updates from the internet.

 

by: jpertchikPosted on 2009-04-17 at 06:58:52ID: 24167822

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Setup>w32tm /monitor
GetDcList failed with error code:  0x80070057.
Exiting with error 0x80070057

C:\Documents and Settings\Setup>

 

by: jpertchikPosted on 2009-04-17 at 06:59:21ID: 24167826

Looks like perhaps i need to set the time up first

 

by: chatxfalconPosted on 2009-04-17 at 07:01:28ID: 24167846

I assume the 2 DNS server are the domain controllers right?


Is the transfer of FSMO a succes? Can your 2 domain controllers can perform replication on NTDS settings? (located start --> run type: dssite.msc)


Please check your event logs and paste here errors specifically from "directory services" section.



Falcon

 

by: jpertchikPosted on 2009-04-17 at 07:04:22ID: 24167871

As soon as i ran this:

w32tm /config /manualpeerlist:time-a.nist.gov,0x8 /syncfromflags:MANUAL
net stop w32time
net start w32time
w32tm /resync


My machine immediately joined the domain, I think a reboot is the only thing left to do.

I'll let you know.

Thanks,.

JPertchik

 

by: cmorffewPosted on 2009-04-17 at 07:06:03ID: 24167885

from your time posting - there is something wrong with the DC server setup - i think chatxfalcon is on to something.
Are your other users able to authenticate on the domain?

 

by: cmorffewPosted on 2009-04-17 at 07:07:28ID: 24167900

good that you were able to join the domain - however, this problem might rear its ugly head again if the time gets out of sync.

 

by: jpertchikPosted on 2009-04-17 at 07:10:08ID: 24167931

Perhaps i need to figure out a way to sync all clients to the DC. Any ideas?

 

by: cmorffewPosted on 2009-04-17 at 07:11:39ID: 24167953

use a group policy and set the configuration in there.

 

by: jpertchikPosted on 2009-04-17 at 07:12:06ID: 24167960

more specifically, clients get time from DC, not outside source, How do i do this?

 

by: jpertchikPosted on 2009-04-17 at 07:12:36ID: 24167962

please elaborate

 

by: cmorffewPosted on 2009-04-17 at 07:15:44ID: 24167995

ok.....
first are you group policy manager in your domain? if not then this will be a manual task on all your machines.

 

by: jpertchikPosted on 2009-04-17 at 07:18:16ID: 24168017

I can log on administraively to the DC and create whatever we need.

 

by: cmorffewPosted on 2009-04-17 at 07:21:40ID: 24168060

OK make sure you have Group Policy Manager installed on your DC and check out the following article.
http://technet.microsoft.com/en-us/library/cc779145.aspx

 

by: chatxfalconPosted on 2009-04-17 at 07:25:36ID: 24168105

Normally Windows clients on a domain synced their time on the Domain Controller.


You can do the following approach:

1)  Add on DHCP Settings --> Server Options "TIME SERVER" pointing to active directory

2) Via Group Policy like what cmorffew suggested (search google for more info and more print screens)


I'm quite positive there's more problem other than time sync. Is there error messages on event logs?



Kindly post it here.



 

by: jpertchikPosted on 2009-04-17 at 07:33:11ID: 24168180

OK...Your losing me...where do i need to go and what should i do?

Thansk

 

by: cmorffewPosted on 2009-04-17 at 07:40:24ID: 24168272

You will need to run mmc.exe
then add the addin - group policy manager
once in  there you can then change the gp to set your time servers as per the link i posted.

Alternatively, as Falcon said, go into your DHCP server add-in(again in mmc) and "1)  Add on DHCP Settings --> Server Options "TIME SERVER" pointing to active directory"

 

by: jpertchikPosted on 2009-04-17 at 07:46:49ID: 24168332

I have group policy object editor, not manager on the DC in my MMC console. As far as DHCP, the confusion might be that i've left that role up to my Firewall Router. Should i be running DHCP from my DC?

 

by: jpertchikPosted on 2009-04-17 at 07:57:54ID: 24168465

Oh...I see... I need to download it...I'll get back to you in a bit,.

Thanks,

JPertchik

 

by: PeteJThomasPosted on 2009-04-17 at 07:58:45ID: 24168478

Wow, the posts are coming in thick and fast here!!

The first thing I would do, is check the event logs on the DCs to ensure there aren't any obvious problems in there. If there are, take some screenshots and post them on here.

If you're looking to set up time synchronisation across your domain, read this article - http://articles.techrepublic.com.com/5100-10878_11-6040425.html

Most will have their DC syncing with an internet time source, and all the clients syncing with the DC. The article above explains how to set it all up properly.

Take one step at a time, if you try and do too much at once, you'll only end up tangled and confused... :P

Pete

 

by: cmorffewPosted on 2009-07-19 at 21:24:02ID: 24892407

I believe the Author has 3 options to resolve the problem,
1. manual update the time on each machine that needs to join the domain and then continuously update the time on each machine as it falls out of acceptable time difference parameters.
2. move the DHCP server role away from the Firewall/Router and on to the DC and add the TIME SERVER option as per chatxfalcon
3. Use Group Policy to set the NTP to the desired settings and control ALL machines in the domain.(this would work for static and dynamic IP address reservations/leases)

If the issue really was an out of sync client/server time, then a check of the Timer server setup should be done.  For correct internal time, the domain should reference one source - the DC or another dedicated NTP server.  The NTP server or DC server should sync its time with an internet based time source.  e.g.  Internet Time Server-> DC Time Server-> Client Time.

Suggested Links:
Group Policy overview http://technet.microsoft.com/en-us/library/cc725828(WS.10).aspx
Configuring time server via group policy http://technet.microsoft.com/en-us/library/bb490605.aspx
How to configure an authoritative time server in Windows Server 2003 http://support.microsoft.com/kb/816042


20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...