Solved

cannot join domain or login with credentials

Posted on 2010-11-16
44
730 Views
Last Modified: 2012-05-10
I have a sbs 2003 server and I used disk clean up to compress some files on the c drive and now I cant join a computer to a domain because it says the specified server cannot perform the requested operation and the ones who are already on the domain cant access the networked folders it asks them for their credentials and when they input them it states that the user name has already been tried and the domain controller cannot be found to verify the information. what is happening? any help would be greatly appreciated.
0
Comment
Question by:itmandan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 22
  • 20
  • +1
44 Comments
 
LVL 10

Expert Comment

by:abhijitwaikar
ID: 34152032
Make sure the DC advertising itself as domain controller,
Run below tests to verfiy the DC and post result.
dcdiag /q
netdiag /q
Netdom query dc - it will show all DCs in network.
netdom query fsmo - check FSMO roles are ok from the DC

On the workstation, check that:
-Date & Time are the same as the domain (closer than 5 mn)
-It has the DC as primary dns server
-you try to join the domain with the FQDN name (mydomain.com)

0
 
LVL 10

Expert Comment

by:abt-it
ID: 34162279
Don't forget to add clients using the website http://connectcomputer with SBS Domains.
0
 

Author Comment

by:itmandan
ID: 34164378
I have tried to add clients using the http://connectcomputer with the SBS domain but no luck.
0
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

 
LVL 10

Expert Comment

by:abt-it
ID: 34164652
What about the event logs of the server? Somewhere must be a failure notice.

Please tell us about the results abhijitwaikar asked before:
dcdiag /q
netdiag /q
Netdom query dc
netdom query fsmo

Check if all services are started (DHCP, DNS, Netlogon ...)
0
 

Author Comment

by:itmandan
ID: 34165146
this is where i think it started  
event viewer
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34165457
No, that are only exchange errors, that's a result of network (or domain) problems. What about
dcdiag /q
netdiag /q
Netdom query dc
netdom query fsmo

Check if all services are started (DHCP, DNS, Netlogon ...)
0
 

Author Comment

by:itmandan
ID: 34165557
but I am having problems with the domain, on some of these computers it says it can't located allstarmetals.local but here is a snap of dcdiag

 dcdiag
and sorry to sound like a noob but how do you run Netdom query dc? from the run or command prompt?
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34165588
From the commandline
0
 

Author Comment

by:itmandan
ID: 34165657
sorry no dice, wont let me
. netdom query dc
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34166664
Could be, that netdom is part of the windows server 2003 ressource kit, in 2008 it's included.
0
 

Author Comment

by:itmandan
ID: 34166873
ah, well I look for the resource kit if I got it.
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34166979
please download the support tools also on your way ;).
0
 

Author Comment

by:itmandan
ID: 34167974
I downloaded the server admin tools but I couldn't find a resource disk that came with the server documentation that would allow me to run netdom query dc. also I spoke with someone else and they were saying that it could be the server is loosing its trust relationship with the workstations.
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34168086
if the server is losing trust relationship with existing clients, there should be no problem adding new clients.

If possible, try to remove and reintegrate existing clients with connection problems, but have a closer look at the eventlog of the server and clients before doing so. I saw an issues with kerberos at the screenshot from dcdiag, could be caused by a DNS Problem.

Think about: you used the disc cleanup to compress files, what about searching for compressed files and uncompress them?

What about services that should be started and did not start automaticly at all? Can you have a look at the services for that?

I remember to have the exchange issues at a customer site without using the cleanup, last thing to solve these issues was a migration to sbs 2008...
0
 

Author Comment

by:itmandan
ID: 34168507
yes I have recieved a Kerberos error, I also did a uncompress of all the files ( “compact /u /s /a /q /i *.*) that are compressed in all volumes then did a defrag a couple of times on the OS volume. but here is a look at the Kerberos error
 Kerberos
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34168570
Do you have two machines with the same same name in your network? Please double Check your DNS if there are two entries with the same name and different IP Adresses, check the forward lookup zone and the reverse zone for duplicated names and different ip adresses!
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34168586
And have a look at the hosts file at c:\windows\systems32\drivers\etc if there is something that is not matching your network...
0
 

Author Comment

by:itmandan
ID: 34168831
I also get this error on the DNS
 dns
0
 

Author Comment

by:itmandan
ID: 34168863
and this is what i have on the hosts file in the server

Untitled36.png
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34171012
Hosts File is normal.
DNS Error can be normal if it only comes up after a restart because AD is started after DNS Service.

Is the Binding of your DNS Server set to the NIC? Are the SRV Entries set correct and did you check the entries for same names with different ip adresses?

The 2003 Ressource Kit can be downloaded at http://www.microsoft.com/downloads/en/details.aspx?DisplayLang=en&FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd
0
 

Author Comment

by:itmandan
ID: 34173132
Im not sure where the SRV Entries would be located in the DNS and about the binding of DNS with the NIC is that on the server or Client side?
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34173432
The SRV Entries can be found in the subtrees of _msdcs.allstartmetals.local and the other subtrees like _tcp _sites _udp etc.

To check the bindings, just right click on server1 at the DNS Console. DNS Server must use the internal NIC of your Server.
0
 

Author Comment

by:itmandan
ID: 34174027
checked the bindings and i believe it looks right where it says the Interfaces tab 192.168.0.2 which is the IP of the server. Now on the SRV entries, I am not sure what I am looking for. is it the host offering this service section, should it display as: server1.allstarmetals.local. ?

here is a picture of what Im talking about.
 Host offering
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34174839
Looks correct.

When connection a new client  to the domain:
1. Add the Computer account using the sbs console.
2. Be sure:
 2.1 that only one NIC is active on the client PC
 2.2 Client only uses DNS of the SBS Server (192.168.0.2), nothing else is possible.
 2.3 that the command nslookup connectcomputer returns the ip adress of the server
3. Open http://servername/connectcomputer with Internet Explorer from the client and follow the assistent

If it's still not possible and you get an error from the client, see http://support.microsoft.com/kb/838431/en-us
0
 

Author Comment

by:itmandan
ID: 34175648
I am getting a error that nslookup couldn't find the server ip address 192.168.0.2
here is a pic
 ns lookup
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34180690
Can you make a screenshot of the command "ipconfig /all" please?
0
 

Author Comment

by:itmandan
ID: 34189630
here is the screen shot
40.png
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34189704
Please remove the DNS Server with IP Adress 4.2.2.2.

In a SBS Network, only the SBS Server or a second DC with activ DNS Role can be DNS Server for the Clients.

You can add a forwarder to the DNS Server to IP 4.2.2.2.
0
 

Author Comment

by:itmandan
ID: 34189760
I have added a forwarder
 forwarder
but when i take of the 4.2.2.2 alternate from the server I get no internet access
 no access
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34190232
The Screenshot is a XP Client and it is not a member of the domain, right? If so, why:
---
but when i take of the 4.2.2.2 alternate from the server I get no internet access
---

What Details can you see by clicking "more informations"? Do you have any proxy Server defined? Please open a CMD and type nslookup google.com and post the result of this command.

Do you have a . DNS Zone in your DNS Server defined?
0
 

Author Comment

by:itmandan
ID: 34190945
when I ran into connectivity issues on the network I unjoined this computer from the network thinking maybe it just needs to be re-joined, but it wouldn't allow it.

to the second part, is that through the server console?
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34191823
Yes, check the list of forward zones of the DNS Service on SBS Server if there is a . Zone. If so, no one could be able ro resolve any Internet Service because the SBS thinks, he is the Big Master for all Zones, no need to ask any other DNS Server.

If there is another DNS Server added to the clients, it should sometimes work to access the internet and sometimes not.

Do you have deleted the computer account for that client on the SBS Server and re-added it?
0
 

Author Comment

by:itmandan
ID: 34192191
im not quite sure what you mean by .Zone in the DNS or where exactly in the DNS it would be located. there is no other DNS server located on the network

and I have deleted the computer and re-added it on the SBS previously with no luck.
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34192351
Have a look at the attached image to see what i mean with a . Zone in DNS Server.

Could you please check the result of the nslookup command from the server and the client? There seems to be something completly wrong with your DNS to me.
point-zone.jpg
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34192373
seems to be an error with the uploaded image, sorry.
point-zone.jpg
0
 

Author Comment

by:itmandan
ID: 34197157
here is what my nslookup sayson the server

45.png
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34197325
nslookup google.com
0
 

Author Comment

by:itmandan
ID: 34197422
here is what I get ns lookup google.com
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34197500
You only have the SBS Server as DNS in your NIC settings? If so, everything is OK.

And the result from the client you used yesterday? But be sure that there is only the SBS as DNS Server in NIC settings!
If you got no response, please disable the Firewall and test again.
0
 

Author Comment

by:itmandan
ID: 34197571
here is what I got on the client side with the dns pointing to the server nslookup client
0
 
LVL 10

Expert Comment

by:abt-it
ID: 34198062
Something is blocking the client to use the SBS Server as DNS Server. And there is something wrong with the client, no alternate DNS Server is listed, but it uses ip 4.2.2.2. Sure that cabling is correct?

Do you have any piece of software on this client that manipulates NIC Settings or is something hidden behind the advanced settings?
0
 

Author Comment

by:itmandan
ID: 34198881
something is wrong with the DNS, all my clients have alternate 4.2.2.2 dns and the ones that don't can't connect to the internet or the cant ping server by name.
0
 
LVL 10

Accepted Solution

by:
abt-it earned 500 total points
ID: 34199300
And the DNS Server 4.2.2.2 is the secondary DNS Server with active directory integrated zones and it also knows all names and ip adresses of your local network? If not, you should have lots of trouble connecting internal PCs by name like problems with joining to the domain.

In a SBS Network is (must be) the SBS Server the Master for all DNS Queries. If this is not possible, you must find out why this is not working. Perhabs a Firewall blocks access to DNS of the server (Port 53), what about the iccw wizard from the SBS Console, does it run without problems?

See also http://support.microsoft.com/kb/323380/en-us and use the SBS BPA for SBS 2003 Servers, you can download it here: http://www.microsoft.com/downloads/en/details.aspx?familyid=3874527A-DE19-49BB-800F-352F3B6F2922&displaylang=en
0
 
LVL 7

Expert Comment

by:YarnoSG
ID: 34208264
as abhijitwaikar has already suggested:

check the TIME on both the client and the server before trying to join the domain... if they are off by more than 5 minutes, the transaction will fail  We just had a daylight savings cusp..... you could be off by an hour and not even know it.
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question