Solved

Windows Server 2012 R2 Unable to Re-Join the Domain

Posted on 2016-07-19
12
51 Views
Last Modified: 2016-07-20
I have a Windows Server 2012 R2 machine that I have previously added to the domain for testing purposes.  I have since removed it from the domain.  I now need to rejoin it to the domain and I get the following error:

"An Active Directory Domain Controller (AD DC) for the domain "domain.com" could not be contacted.

Ensure that the domain name is typed correctly.

If the name is correct, click details for troubleshooting information.

Note: This information is intended for a network administrator.  If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\Windows\debug\dcdiag.txt.

DNS was successfully queried for the service location (SRV) resource record used to locate a domain controller for domain "domain.com":

The query was for the SRV record for _ldap._tcp.dc._msdcs.domain.com

The following domain controllers were identified by the query:
server1.domain.com
server2.domain.com

However no domain controllers could be contacted.

Common causes of this error include:

- Host (A) or (AAAA) records that map the names of the domain controllers to their IP addresses are missing or contain incorrect addresses.

- Domain controllers registered in DNS are not connected to the network or are not running."

I am however able to join and un-join the domain from a Windows 7 machine.  I have verified that AD and DNS are propagating correctly.  I have also viewed the computers in AD and enabled the computer account, I've tried resetting the account, as well as deleting the account with no luck.

When running ipconfig /all it lists the appropriate DNS servers.

I can also ping my ad/dns servers via host name.

When doing an nslookup on domain.com I get the results:

PS C:\Users\Administrator> nslookup domain.com
DNS request timed out.
    timeout was 2 seconds.
Server:  UnKnown
Address:  (server1's address)

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
*** Request to UnKnown timed-out
PS C:\Users\Administrator>

When running nslookup from another computer or Windows 2012 R2 Server I get the results I should receive.

It appears as though it is a DNS issue but I'm not sure where to go next.

Thanks in advance.
0
Comment
Question by:ollybuba
  • 6
  • 4
  • 2
12 Comments
 
LVL 6

Expert Comment

by:Tim Phillips
Comment Utility
Simple things first, do you have the DNS server entries on your NIC pointing to the correct DNS server (likely the domain controller)?
0
 

Author Comment

by:ollybuba
Comment Utility
Yes, I can also ping my ad/dns servers by host name.
0
 
LVL 11

Expert Comment

by:Bryant Schaper
Comment Utility
check DNS, or if on a separate subnet/vlan we may have to look at a couple things
0
 

Author Comment

by:ollybuba
Comment Utility
What should I check with DNS?  Everything seems to be operating properly on every other computer.
0
 
LVL 6

Expert Comment

by:Tim Phillips
Comment Utility
If you do an "ipconfig /flushdns" are you still able to resolve the domain controller after that?
0
 

Author Comment

by:ollybuba
Comment Utility
Yes.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 11

Accepted Solution

by:
Bryant Schaper earned 500 total points
Comment Utility
you can ping the domain.com try the short name of the domain instead
0
 

Author Comment

by:ollybuba
Comment Utility
That works as well.
0
 
LVL 11

Expert Comment

by:Bryant Schaper
Comment Utility
joining by the short name works?
0
 

Author Comment

by:ollybuba
Comment Utility
I was referring to pinging.  I was able to join the server to the domain via the short name.  Do you know why it wouldn't let me join via domain.com?
0
 
LVL 11

Expert Comment

by:Bryant Schaper
Comment Utility
can you post ipconfig /all
0
 

Author Closing Comment

by:ollybuba
Comment Utility
Solution was found by only entering the short name of the domain.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
A procedure for exporting installed hotfix details of remote computers using powershell
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now