Link to home
Start Free TrialLog in
Avatar of itmandan
itmandan

asked on

cannot join domain or login with credentials

I have a sbs 2003 server and I used disk clean up to compress some files on the c drive and now I cant join a computer to a domain because it says the specified server cannot perform the requested operation and the ones who are already on the domain cant access the networked folders it asks them for their credentials and when they input them it states that the user name has already been tried and the domain controller cannot be found to verify the information. what is happening? any help would be greatly appreciated.
Avatar of abhijitwaikar
abhijitwaikar
Flag of India image

Make sure the DC advertising itself as domain controller,
Run below tests to verfiy the DC and post result.
dcdiag /q
netdiag /q
Netdom query dc - it will show all DCs in network.
netdom query fsmo - check FSMO roles are ok from the DC

On the workstation, check that:
-Date & Time are the same as the domain (closer than 5 mn)
-It has the DC as primary dns server
-you try to join the domain with the FQDN name (mydomain.com)

Avatar of Matthias Abt
Don't forget to add clients using the website http://connectcomputer with SBS Domains.
Avatar of itmandan
itmandan

ASKER

I have tried to add clients using the http://connectcomputer with the SBS domain but no luck.
What about the event logs of the server? Somewhere must be a failure notice.

Please tell us about the results abhijitwaikar asked before:
dcdiag /q
netdiag /q
Netdom query dc
netdom query fsmo

Check if all services are started (DHCP, DNS, Netlogon ...)
this is where i think it started  
User generated image
No, that are only exchange errors, that's a result of network (or domain) problems. What about
dcdiag /q
netdiag /q
Netdom query dc
netdom query fsmo

Check if all services are started (DHCP, DNS, Netlogon ...)
but I am having problems with the domain, on some of these computers it says it can't located allstarmetals.local but here is a snap of dcdiag

 User generated image
and sorry to sound like a noob but how do you run Netdom query dc? from the run or command prompt?
From the commandline
sorry no dice, wont let me
. User generated image
Could be, that netdom is part of the windows server 2003 ressource kit, in 2008 it's included.
ah, well I look for the resource kit if I got it.
please download the support tools also on your way ;).
I downloaded the server admin tools but I couldn't find a resource disk that came with the server documentation that would allow me to run netdom query dc. also I spoke with someone else and they were saying that it could be the server is loosing its trust relationship with the workstations.
if the server is losing trust relationship with existing clients, there should be no problem adding new clients.

If possible, try to remove and reintegrate existing clients with connection problems, but have a closer look at the eventlog of the server and clients before doing so. I saw an issues with kerberos at the screenshot from dcdiag, could be caused by a DNS Problem.

Think about: you used the disc cleanup to compress files, what about searching for compressed files and uncompress them?

What about services that should be started and did not start automaticly at all? Can you have a look at the services for that?

I remember to have the exchange issues at a customer site without using the cleanup, last thing to solve these issues was a migration to sbs 2008...
yes I have recieved a Kerberos error, I also did a uncompress of all the files ( “compact /u /s /a /q /i *.*) that are compressed in all volumes then did a defrag a couple of times on the OS volume. but here is a look at the Kerberos error
 User generated image
Do you have two machines with the same same name in your network? Please double Check your DNS if there are two entries with the same name and different IP Adresses, check the forward lookup zone and the reverse zone for duplicated names and different ip adresses!
And have a look at the hosts file at c:\windows\systems32\drivers\etc if there is something that is not matching your network...
I also get this error on the DNS
 User generated image
and this is what i have on the hosts file in the server

Untitled36.png
Hosts File is normal.
DNS Error can be normal if it only comes up after a restart because AD is started after DNS Service.

Is the Binding of your DNS Server set to the NIC? Are the SRV Entries set correct and did you check the entries for same names with different ip adresses?

The 2003 Ressource Kit can be downloaded at http://www.microsoft.com/downloads/en/details.aspx?DisplayLang=en&FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd
Im not sure where the SRV Entries would be located in the DNS and about the binding of DNS with the NIC is that on the server or Client side?
The SRV Entries can be found in the subtrees of _msdcs.allstartmetals.local and the other subtrees like _tcp _sites _udp etc.

To check the bindings, just right click on server1 at the DNS Console. DNS Server must use the internal NIC of your Server.
checked the bindings and i believe it looks right where it says the Interfaces tab 192.168.0.2 which is the IP of the server. Now on the SRV entries, I am not sure what I am looking for. is it the host offering this service section, should it display as: server1.allstarmetals.local. ?

here is a picture of what Im talking about.
 User generated image
Looks correct.

When connection a new client  to the domain:
1. Add the Computer account using the sbs console.
2. Be sure:
 2.1 that only one NIC is active on the client PC
 2.2 Client only uses DNS of the SBS Server (192.168.0.2), nothing else is possible.
 2.3 that the command nslookup connectcomputer returns the ip adress of the server
3. Open http://servername/connectcomputer with Internet Explorer from the client and follow the assistent

If it's still not possible and you get an error from the client, see http://support.microsoft.com/kb/838431/en-us
I am getting a error that nslookup couldn't find the server ip address 192.168.0.2
here is a pic
 User generated image
Can you make a screenshot of the command "ipconfig /all" please?
here is the screen shot
40.png
Please remove the DNS Server with IP Adress 4.2.2.2.

In a SBS Network, only the SBS Server or a second DC with activ DNS Role can be DNS Server for the Clients.

You can add a forwarder to the DNS Server to IP 4.2.2.2.
I have added a forwarder
 User generated image
but when i take of the 4.2.2.2 alternate from the server I get no internet access
 User generated image
The Screenshot is a XP Client and it is not a member of the domain, right? If so, why:
---
but when i take of the 4.2.2.2 alternate from the server I get no internet access
---

What Details can you see by clicking "more informations"? Do you have any proxy Server defined? Please open a CMD and type nslookup google.com and post the result of this command.

Do you have a . DNS Zone in your DNS Server defined?
when I ran into connectivity issues on the network I unjoined this computer from the network thinking maybe it just needs to be re-joined, but it wouldn't allow it.

to the second part, is that through the server console?
Yes, check the list of forward zones of the DNS Service on SBS Server if there is a . Zone. If so, no one could be able ro resolve any Internet Service because the SBS thinks, he is the Big Master for all Zones, no need to ask any other DNS Server.

If there is another DNS Server added to the clients, it should sometimes work to access the internet and sometimes not.

Do you have deleted the computer account for that client on the SBS Server and re-added it?
im not quite sure what you mean by .Zone in the DNS or where exactly in the DNS it would be located. there is no other DNS server located on the network

and I have deleted the computer and re-added it on the SBS previously with no luck.
Have a look at the attached image to see what i mean with a . Zone in DNS Server.

Could you please check the result of the nslookup command from the server and the client? There seems to be something completly wrong with your DNS to me.
point-zone.jpg
seems to be an error with the uploaded image, sorry.
point-zone.jpg
here is what my nslookup sayson the server

45.png
nslookup google.com
here is what I get User generated image
You only have the SBS Server as DNS in your NIC settings? If so, everything is OK.

And the result from the client you used yesterday? But be sure that there is only the SBS as DNS Server in NIC settings!
If you got no response, please disable the Firewall and test again.
here is what I got on the client side with the dns pointing to the server User generated image
Something is blocking the client to use the SBS Server as DNS Server. And there is something wrong with the client, no alternate DNS Server is listed, but it uses ip 4.2.2.2. Sure that cabling is correct?

Do you have any piece of software on this client that manipulates NIC Settings or is something hidden behind the advanced settings?
something is wrong with the DNS, all my clients have alternate 4.2.2.2 dns and the ones that don't can't connect to the internet or the cant ping server by name.
ASKER CERTIFIED SOLUTION
Avatar of Matthias Abt
Matthias Abt
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
as abhijitwaikar has already suggested:

check the TIME on both the client and the server before trying to join the domain... if they are off by more than 5 minutes, the transaction will fail  We just had a daylight savings cusp..... you could be off by an hour and not even know it.