Link to home
Start Free TrialLog in
Avatar of just_russell
just_russell

asked on

adding users and computers to a server 2003

Hi,
To save time when building a networked system for a client I built a single PC, sysprepped it then duplicated the system onto five other hard drives. O installes server 2003 on another new machine then hooked it all up together., so far so good.

When I now try to get the computers to join the domain I'm running into problems. I'm sure that part of the issue is that each of the six PCs that I build all now have the same computer name (front1) I don't seem able to rename the computers.

When I attempt to join the domain (sunderland.local) I get the message that the computer can't join the network with the user / computer that I generated.

The trust relationship between this workstation and the primary domain failed.

I'm looking for a way to resolve these issues and to get all the computers fully connected to the domain.

To complete the picture, I've added all the computer and users on the server. The users have the same name as their computers and they are front1, front2, gm, sales, reservation and epos.

Is there anything glaringly obvious and are there any quick fixes?

As you can probably tell, I do not know my way around server 2003...

Thanks
Russell
Avatar of gtworek
gtworek
Flag of Poland image

Try to change your workstation sid with newsid (http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx)
It should be done by sysprep but if is not - try with this little utility.
Do those computers think they are in the domain? Sounds like it from your error message.

I would try putting each of them in a workgroup, then rename them and then join them back to the domain. You can't join the domain while they have the same name.
The newsid option I would only try if the workgroup and rename approach doesn't work. If sysprep was utilized correctly the SID should not be the problem.
Avatar of just_russell
just_russell

ASKER

hi gtworek,

I just found newsid amd am about to try it on one of the pcs. I'll let you knoow how it goes.

Hi Wonko,
Each computer thinks it's in a domain of the logon name. So sales thinks it's in a domain called sales, several think they're in a domain called front1.

I'll report back in about 30 mins after I've used newsid

Russell
well,

newsid did what was required of it an now I've renamed one of the computers as 'RESERVATIONS'.

When I try to create a new user 'reservation' or any name (by right clicking on computer, selecting properties / change name and entering the name then selecting the goup administrators (or any group)) I get the message:

"The user RESERVATIONS\reservation could not be added to the Administrators group because RESERVATIONS\reservation does not exist."

I seem to have successfully created the user reservations for the domain SUNDERLAND, however, when I attempt to log on to the server I get the message:

"The system cannot log you on because the domain SUNDERLAND is not available"

The server is switched on and I can ping it from reservations.

If I browse to \\SUNDERLAND I get the message:
"Windows can not find \\SUNDERLAND check the spelling and try again."

Your thoughts please?

Russell

is sunderland the name of your server or your domain?

Are your DNS set properly on the client?
the domain is sunderland.local

the server is SUNDERLAND-SRVR

I'm never sure if I'm getting naming conflicts...

On the server I've created a user named reservations
I've also created a computer named reservations

When I go to the PC (xp pro) that I've called RESERVATIONS and attempt to log on with the criteria

Username: reservations (or RESERVATIONS
Password: AB123cd456
Domain: SUNDERLAND

I get the message mentioned earlier.

As for DNS on the3 client. I can browse the internet so I assume that DNS is working at least as far as the outside world is concerned.

On the server I did not choose to have it perform the DNS role (nor DHCP for that matter) as I preferred to use the router for these functions.

I'm not sure why this behaviour has occurred but I have one PC that can logon to the server (SALES), but it can not find \\SUNDERLAND when I attempt to browse to it with IE8.

Considering all drives were derived from the same image file, this behaviour really puzzles me :-(

Russell
you cannot use your router as a DNS server in AD domain!!!
set your DNS to your DC.
Hi,

Do you mean that I should configure the server as a DNS or that I should point the clients at the IP address of the server for their DNS or both?

I've been through setting up the DNS role but I'm not confident that I used correct responses and input. For example, for the domain name I used sunderland.local, is this correct? The domain name owned by the company is hotels-sunderland.com...

Thanks
Russell
your server IS DNS server if it is DC.
Just tell your clients to use it as DNS server...

On the DC you have set up DNS server to forward requests to your router DNS.
OK, the server IP address is 192.168.94.102. I've set this as the DNS in three of the clients.

When I attempt to ping sunderland.local I get a timed out reply, the IP address that is retuned is a 169.254 address.

I'm not confident that I configured the server correctly as a DNS

This lack of knowledge about DNS management on windows server 2003 is why I removed the role in the first instance.

The information that I have available to configure DNS role on the server includes:

The domain name (sunderland.local) I used this name
The company's domain name (hotels-sunderland.com) I didn't use this name
The IP address of the DNS server that I prefer to use (208.067.222.222)

Is there a layman's guide to configuring DNS on this server?

Russell
OK,

a quick question about setting up my DNS.

Is the name of the zone going to be

1. sunderland.local (i.e. the name of the domain)
2. hotels-sunderland.com (the company's FQDN)
3. something else?

Thanks
Russell
can you post here your ipconfig /all result from your client?
Hi

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : sales
        Primary Dns Suffix  . . . . . . . : sunderland.local
        Node Type . . . . . . . . . . . . : Mixed
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : sunderland.local

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) PCI-E G
igabit Ethernet NIC
        Physical Address. . . . . . . . . : 00-26-18-16-3A-EC
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.94.111
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.94.1
        DHCP Server . . . . . . . . . . . : 192.168.94.1
        DNS Servers . . . . . . . . . . . : 192.168.94.2
        Lease Obtained. . . . . . . . . . : 28 August 2009 17:03:11
        Lease Expires . . . . . . . . . . : 31 August 2009 17:03:11

C:\Documents and Settings\Administrator>
You should manually set your DNS server to your DC address (192.168.94.102)
Then you have to set up forwarder on your DC's DNS server.
Setting the clients to point to the server as their dns is not an issue.

The microsoft website give these directions..., I'm stuck at the third point...


   1. On the Select Configuration Action page, select the Create a forward lookup zone check box, and then click Next.

   2. To specify that this DNS hosts a DNS zone that contains DNS resource records for your network resources, on the Primary Server Location page, click This server maintains the zone, and then click Next.

   3. On the Zone Name page, in Zone name, specify the name of the DNS zone for your network, and then click Next. The name of the zone is the same as the name of the DNS domain for your small organization or branch office.

   4. On the Dynamic Update page, click Allow both nonsecure and secure dynamic updates, and then click Next. This makes sure that the DNS resource records for the resources in your network update automatically.

   5. On the Forwarders page, click Yes, it should forward queries to DNS servers with the following IP addresses, and then click Next. When you select this configuration, you forward all DNS queries for DNS names outside your network to a DNS at either your ISP or central office. Type one or more IP addresses that either your ISP or central office DNS servers use.

   6. On the Completing the Configure a DNS Wizard page of the Configure a DNS Wizard, you can click Back to change any of the settings. To apply your selections, click Finish.
well,

whereas before I could browse the internet from a client PC, now that I have set up dns server I can no longer browse the internet nor contact the server :-(
I can now ping sunderland.com from a client and get the ip address reply of 192.168.94.2 (I gave the server a new static IP address)

but I can not browse the internet.

I set the forward lookup IP address in dns server to 208.067.222.222 (opendns), should I have set this to the router IP address (192.168.94.1)?

How can I modify dns server settings?
If your router was your DNS before, then you should set router IP in forwarders.
Click Start, point to Administrative Tools, and then click DNS.
Right-click ServerName, where ServerName is the name of the server, and then click the Forwarders tab.
Click a DNS domain in the DNS domain list.
In the Selected domain's forwarder IP address box, type the IP address of your router, and then click Add.
Click OK.
Thanks, that realy was very helpful

I can now connect to the internet from client PCs.

Furthermore, the error I'm getting when trying to logon from a client PC has changed. The error message is now

Windows cannot connect to the domain either because the domain controller is downor otherwise unavailable or because your computer account was not found.
ASKER CERTIFIED SOLUTION
Avatar of gtworek
gtworek
Flag of Poland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I'm going to have to pick this up over the weekend,

thanks for all your help so far.

Russell