cannot join domain or login with credentials

I have a sbs 2003 server and I used disk clean up to compress some files on the c drive and now I cant join a computer to a domain because it says the specified server cannot perform the requested operation and the ones who are already on the domain cant access the networked folders it asks them for their credentials and when they input them it states that the user name has already been tried and the domain controller cannot be found to verify the information. what is happening? any help would be greatly appreciated.
itmandanAsked:
Who is Participating?
 
abt-itCommented:
And the DNS Server 4.2.2.2 is the secondary DNS Server with active directory integrated zones and it also knows all names and ip adresses of your local network? If not, you should have lots of trouble connecting internal PCs by name like problems with joining to the domain.

In a SBS Network is (must be) the SBS Server the Master for all DNS Queries. If this is not possible, you must find out why this is not working. Perhabs a Firewall blocks access to DNS of the server (Port 53), what about the iccw wizard from the SBS Console, does it run without problems?

See also http://support.microsoft.com/kb/323380/en-us and use the SBS BPA for SBS 2003 Servers, you can download it here: http://www.microsoft.com/downloads/en/details.aspx?familyid=3874527A-DE19-49BB-800F-352F3B6F2922&displaylang=en
0
 
abhijitwaikarCommented:
Make sure the DC advertising itself as domain controller,
Run below tests to verfiy the DC and post result.
dcdiag /q
netdiag /q
Netdom query dc - it will show all DCs in network.
netdom query fsmo - check FSMO roles are ok from the DC

On the workstation, check that:
-Date & Time are the same as the domain (closer than 5 mn)
-It has the DC as primary dns server
-you try to join the domain with the FQDN name (mydomain.com)

0
 
abt-itCommented:
Don't forget to add clients using the website http://connectcomputer with SBS Domains.
0
Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
itmandanAuthor Commented:
I have tried to add clients using the http://connectcomputer with the SBS domain but no luck.
0
 
abt-itCommented:
What about the event logs of the server? Somewhere must be a failure notice.

Please tell us about the results abhijitwaikar asked before:
dcdiag /q
netdiag /q
Netdom query dc
netdom query fsmo

Check if all services are started (DHCP, DNS, Netlogon ...)
0
 
itmandanAuthor Commented:
this is where i think it started  
event viewer
0
 
abt-itCommented:
No, that are only exchange errors, that's a result of network (or domain) problems. What about
dcdiag /q
netdiag /q
Netdom query dc
netdom query fsmo

Check if all services are started (DHCP, DNS, Netlogon ...)
0
 
itmandanAuthor Commented:
but I am having problems with the domain, on some of these computers it says it can't located allstarmetals.local but here is a snap of dcdiag

 dcdiag
and sorry to sound like a noob but how do you run Netdom query dc? from the run or command prompt?
0
 
abt-itCommented:
From the commandline
0
 
itmandanAuthor Commented:
sorry no dice, wont let me
. netdom query dc
0
 
abt-itCommented:
Could be, that netdom is part of the windows server 2003 ressource kit, in 2008 it's included.
0
 
itmandanAuthor Commented:
ah, well I look for the resource kit if I got it.
0
 
abt-itCommented:
please download the support tools also on your way ;).
0
 
itmandanAuthor Commented:
I downloaded the server admin tools but I couldn't find a resource disk that came with the server documentation that would allow me to run netdom query dc. also I spoke with someone else and they were saying that it could be the server is loosing its trust relationship with the workstations.
0
 
abt-itCommented:
if the server is losing trust relationship with existing clients, there should be no problem adding new clients.

If possible, try to remove and reintegrate existing clients with connection problems, but have a closer look at the eventlog of the server and clients before doing so. I saw an issues with kerberos at the screenshot from dcdiag, could be caused by a DNS Problem.

Think about: you used the disc cleanup to compress files, what about searching for compressed files and uncompress them?

What about services that should be started and did not start automaticly at all? Can you have a look at the services for that?

I remember to have the exchange issues at a customer site without using the cleanup, last thing to solve these issues was a migration to sbs 2008...
0
 
itmandanAuthor Commented:
yes I have recieved a Kerberos error, I also did a uncompress of all the files ( “compact /u /s /a /q /i *.*) that are compressed in all volumes then did a defrag a couple of times on the OS volume. but here is a look at the Kerberos error
 Kerberos
0
 
abt-itCommented:
Do you have two machines with the same same name in your network? Please double Check your DNS if there are two entries with the same name and different IP Adresses, check the forward lookup zone and the reverse zone for duplicated names and different ip adresses!
0
 
abt-itCommented:
And have a look at the hosts file at c:\windows\systems32\drivers\etc if there is something that is not matching your network...
0
 
itmandanAuthor Commented:
I also get this error on the DNS
 dns
0
 
itmandanAuthor Commented:
and this is what i have on the hosts file in the server

Untitled36.png
0
 
abt-itCommented:
Hosts File is normal.
DNS Error can be normal if it only comes up after a restart because AD is started after DNS Service.

Is the Binding of your DNS Server set to the NIC? Are the SRV Entries set correct and did you check the entries for same names with different ip adresses?

The 2003 Ressource Kit can be downloaded at http://www.microsoft.com/downloads/en/details.aspx?DisplayLang=en&FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd
0
 
itmandanAuthor Commented:
Im not sure where the SRV Entries would be located in the DNS and about the binding of DNS with the NIC is that on the server or Client side?
0
 
abt-itCommented:
The SRV Entries can be found in the subtrees of _msdcs.allstartmetals.local and the other subtrees like _tcp _sites _udp etc.

To check the bindings, just right click on server1 at the DNS Console. DNS Server must use the internal NIC of your Server.
0
 
itmandanAuthor Commented:
checked the bindings and i believe it looks right where it says the Interfaces tab 192.168.0.2 which is the IP of the server. Now on the SRV entries, I am not sure what I am looking for. is it the host offering this service section, should it display as: server1.allstarmetals.local. ?

here is a picture of what Im talking about.
 Host offering
0
 
abt-itCommented:
Looks correct.

When connection a new client  to the domain:
1. Add the Computer account using the sbs console.
2. Be sure:
 2.1 that only one NIC is active on the client PC
 2.2 Client only uses DNS of the SBS Server (192.168.0.2), nothing else is possible.
 2.3 that the command nslookup connectcomputer returns the ip adress of the server
3. Open http://servername/connectcomputer with Internet Explorer from the client and follow the assistent

If it's still not possible and you get an error from the client, see http://support.microsoft.com/kb/838431/en-us
0
 
itmandanAuthor Commented:
I am getting a error that nslookup couldn't find the server ip address 192.168.0.2
here is a pic
 ns lookup
0
 
abt-itCommented:
Can you make a screenshot of the command "ipconfig /all" please?
0
 
itmandanAuthor Commented:
here is the screen shot
40.png
0
 
abt-itCommented:
Please remove the DNS Server with IP Adress 4.2.2.2.

In a SBS Network, only the SBS Server or a second DC with activ DNS Role can be DNS Server for the Clients.

You can add a forwarder to the DNS Server to IP 4.2.2.2.
0
 
itmandanAuthor Commented:
I have added a forwarder
 forwarder
but when i take of the 4.2.2.2 alternate from the server I get no internet access
 no access
0
 
abt-itCommented:
The Screenshot is a XP Client and it is not a member of the domain, right? If so, why:
---
but when i take of the 4.2.2.2 alternate from the server I get no internet access
---

What Details can you see by clicking "more informations"? Do you have any proxy Server defined? Please open a CMD and type nslookup google.com and post the result of this command.

Do you have a . DNS Zone in your DNS Server defined?
0
 
itmandanAuthor Commented:
when I ran into connectivity issues on the network I unjoined this computer from the network thinking maybe it just needs to be re-joined, but it wouldn't allow it.

to the second part, is that through the server console?
0
 
abt-itCommented:
Yes, check the list of forward zones of the DNS Service on SBS Server if there is a . Zone. If so, no one could be able ro resolve any Internet Service because the SBS thinks, he is the Big Master for all Zones, no need to ask any other DNS Server.

If there is another DNS Server added to the clients, it should sometimes work to access the internet and sometimes not.

Do you have deleted the computer account for that client on the SBS Server and re-added it?
0
 
itmandanAuthor Commented:
im not quite sure what you mean by .Zone in the DNS or where exactly in the DNS it would be located. there is no other DNS server located on the network

and I have deleted the computer and re-added it on the SBS previously with no luck.
0
 
abt-itCommented:
Have a look at the attached image to see what i mean with a . Zone in DNS Server.

Could you please check the result of the nslookup command from the server and the client? There seems to be something completly wrong with your DNS to me.
point-zone.jpg
0
 
abt-itCommented:
seems to be an error with the uploaded image, sorry.
point-zone.jpg
0
 
itmandanAuthor Commented:
here is what my nslookup sayson the server

45.png
0
 
abt-itCommented:
nslookup google.com
0
 
itmandanAuthor Commented:
here is what I get ns lookup google.com
0
 
abt-itCommented:
You only have the SBS Server as DNS in your NIC settings? If so, everything is OK.

And the result from the client you used yesterday? But be sure that there is only the SBS as DNS Server in NIC settings!
If you got no response, please disable the Firewall and test again.
0
 
itmandanAuthor Commented:
here is what I got on the client side with the dns pointing to the server nslookup client
0
 
abt-itCommented:
Something is blocking the client to use the SBS Server as DNS Server. And there is something wrong with the client, no alternate DNS Server is listed, but it uses ip 4.2.2.2. Sure that cabling is correct?

Do you have any piece of software on this client that manipulates NIC Settings or is something hidden behind the advanced settings?
0
 
itmandanAuthor Commented:
something is wrong with the DNS, all my clients have alternate 4.2.2.2 dns and the ones that don't can't connect to the internet or the cant ping server by name.
0
 
YarnoSGCommented:
as abhijitwaikar has already suggested:

check the TIME on both the client and the server before trying to join the domain... if they are off by more than 5 minutes, the transaction will fail  We just had a daylight savings cusp..... you could be off by an hour and not even know it.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.