We help IT Professionals succeed at work.

Cannot Join Machines to Domain

Jay Schwegler
on
Medium Priority
298 Views
Last Modified: 2010-04-18
This past weekend, I introduced my first Windows Server 2003 Domain controller to my existing Windows 2000 domain. Everything went very well, no errors/problems. All machines are properly logging in.

This issue is that I cannot join new machines to the domain. When I attempt to do this, the client says:

Following error occured attempting to join the domain <domain>
Access Denied

The account I am using to join the machine is the Administrator AD account with full rights to everything. Is there some new Permissions or Group Policy object that is preventing me from doing this? I had no problems with this before bringing in the 2003 DC.

Ideas?
Comment
Watch Question

Have you gotten rid of any old dc?

Time on the machine matches ther server?
Dns is good in your network?
CERTIFIED EXPERT

Author

Commented:
I have two active DC's, one Windows 2000 and one Windows Server 2003. Active Directory is clean, no old DC's

DNS is good

Time is good as well, matches the DC exactly
CERTIFIED EXPERT

Author

Commented:
Actually scratch what I said about any machine.. It's just one machine, I just joined a Windows 2000 Pro machine to the domain just now.

This particular machine is Windows XP, was previously part of the domain, but was disjoined. The old machine account has been removed from AD and is in a workgroup right now.
Make sure all clients and members of the domain are pointing to the internal Windows DNS servers only.  Don't point clients to ISP DNS servers...  DNS is needed for the client machine to "talk" to Active directory...

Are you using?

DOMAIN?

or

DOMAIN.local

syntax when joining the domain?
CERTIFIED EXPERT

Author

Commented:
It's actually only this ONE machine that won't join.

DNS is pointed to my AD integrated Domain Servers
It is currently in a Workgroup

I'm attempting to join the machine to the domain through the GUI on the workstation (My Computer/Properties/Computer Name)

I've tried both "domain" and "domain.com" same result
you could try manually creating the computer account in the domain...then join.
CERTIFIED EXPERT

Author

Commented:
Did that already.

I guess I could try joining it with a different machine name, but I really shouldn't have to do that.
do you have a password associated with the administrator account?  You need a password...
CERTIFIED EXPERT

Author

Commented:
I just renamed the machine, still no luck.

Plus, I'm not sure if the above article is valid because I just joined a new machine to the domain in the same manner 15 or so minutes ago.
CERTIFIED EXPERT

Author

Commented:
Yes, there is a password associated with the local administrator account I am logging in with, as well as the Administrator Account in AD (obviously).

Commented:
I have never mixed 2000 and 2003 servers as DCs but which opne is being used for AD authintication? I may be moving in the wrong direction but this just popped into my head. May be better for server 2003? Shot in the dark.
CERTIFIED EXPERT

Author

Commented:
I actually just fixed it. I thank everyone for their responses.

I removed the Client for Microsoft Networks and re-installed it, joined the domain like a champ. Must have been something hosed up with that.
Commented:
Closed, 500 points refunded.
GranMod
The Experts Exchange
Community Support Moderator of all Ages

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.