Solved

Cannot join to domain

Posted on 2016-10-04
16
88 Views
Last Modified: 2016-10-26
Setting up a new employee using a laptop running Win7Pro. Our SBS 2008 is our DC.  I am trying to "map a network drive" and having trouble doing that, but I think the real problem has something to do with the computer not being joined to the domain?  When I was not able to connect to network drive, I decided to look at Join a Domain or Workstation and when I enter the users credentials, it said it found some sort of record for this computer, but the next window says "Your computer could not be joined to the domain because the following error occurred:  Access is denied.
0
Comment
Question by:wfcrr
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
16 Comments
 
LVL 31

Expert Comment

by:Scott C
ID: 41828147
So is the laptop actually joined to the domain?  Look at the properties of the computer and in AD to see if it's actually there.

If not, join  it to the domain.

You may need to did-join it to a workgroup, delete the computer from AD then re-add it.

Make sure this working before you try to get to any network resources.
0
 

Expert Comment

by:Darth Vader
ID: 41828151
Check if computer is in the domain too. Also try DOMAIN\USER for login credentials. Is the user account in active state in AD Users and Computers?
0
 

Author Comment

by:wfcrr
ID: 41828172
If you guys could give really idiot proof instruction, that would great. I am novice to this and have a head cold today and having hard time just remembering my name.  What do I click on on the laptop and what to click on in the SBS 2008?
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 

Author Comment

by:wfcrr
ID: 41828297
@ Vader, I see the user in AD Users and Groups. Not sure how to tell if it is in active state...what do I look at?

@ScottCha, what do I look at?  I know I had another user working from this machine and it worked fine. Now have a different (new employee) user and having this issue. I apologize, I need a little more clarification on where to look.
0
 
LVL 24

Expert Comment

by:smckeown777
ID: 41828826
Click Start, right click Computer and select Properties
Half way down the screen you'll see if its domain joined or not - it will either say Domain and give the name of your domain or Workgroup(which means not domain joined)
0
 

Author Comment

by:wfcrr
ID: 41828903
Hey, smkeown777, good to hear from you!!!!

It says contuso.local.  That is our domain.  Wonder what else I need to check?
0
 
LVL 24

Expert Comment

by:smckeown777
ID: 41828906
Right well that means you are on the domain
What user are you logging in as?
When you login as that user and try to map a drive what happens? Access denied? Has that user permissions for the drive itself? Is there other users who DO have access - can you login as those users and see if they can map the drive from this machine?
0
 

Author Comment

by:wfcrr
ID: 41828936
If I log on with my credentials, I can map the network drive.

If I log on with new user creds and try to map network drive, it can't find the path to the network drive. I have tried browsing to it and I have tried entering the path manually.

Another odd thing is this user cannot logon using the VPN logon.  I have to log them on the computer and then connect the VPN.  We are VPN'd to our main office. I usually log on using a VPN logon by pressing the little blue icon in the lower right corner. That shows up when I am at the login screen and do a Ctrl Alt Delete, then click Switch User, then the blue icon appears and I select it and enter the user name and password. For some reason I cannot get this new user logged on using the VPN logon method. I have to log them on then connect the VPN after the user is logged on....so that is one odd thing.

If you have a moment, can you also look at this question?

https://www.experts-exchange.com/questions/28974344/Laptop-won't-display-to-other-monitors.html
0
 
LVL 24

Expert Comment

by:smckeown777
ID: 41828954
So that would tell me the permissions on the share are not allowing the user to map to it...
I'm off now for the night over here but you need to check the permissions on your drive share on the server and see if that new user has access etc...

No clue about the VPN right now
0
 

Author Comment

by:wfcrr
ID: 41842215
@smckeown777, I think there is something to do with the user permissions and possibly how that computer is set.  I took it to our datacenter and tried logging on VPN while on that LAN and got same result...could not VPN new user, but, I could VPN my user.  I think I need to go into some of the settings on the user profile on that machine?
0
 
LVL 24

Expert Comment

by:smckeown777
ID: 41842238
Right well VPN is a little out of my league - no idea what permissions or how you give permissions for a user to allow them to vpn...
Have you done this before or is this your first time? Creating users and allowing VPN I mean?

Somebody else might have an answer to that issue I'm just not hot on VPN stuff
0
 

Author Comment

by:wfcrr
ID: 41842253
I think it has something to do with user being added to certain groups or something.
0
 
LVL 24

Assisted Solution

by:smckeown777
smckeown777 earned 125 total points
ID: 41842330
Ok well check what groups your working user is in and add to those groups as a test and see what happens...
0
 
LVL 43

Assisted Solution

by:Davis McCarn
Davis McCarn earned 125 total points
ID: 41845547
Whenever you create a new user (AD or Workgroup), you need to check the groups and existing peer user belongs to and add the new user to those groups.  If the groups were set up cleanly and logically, it should be fairly easy.
0
 
LVL 29

Accepted Solution

by:
masnrock earned 250 total points
ID: 41845836
Have you checked the group membership of the account in question? Might be possible it is not in the necessary groups for access to the network share that you've having issues with.
0

Featured Post

Turn Insights Into Action

You’ve already invested in ITSM tools, chat applications, automation utilities, and more. Fortify these solutions with intelligent communications so you can drive business processes forward.

With xMatters, you'll never miss a beat.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Here's a look at newsworthy articles and community happenings during the last month.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question