Unable to join new computer to our domain

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I received brand new IBM 2 CPU 4300 @ 1.8 GHz. When I receive new machines
corporate has this rule where I have to put their image on it. Although I'm
not part of their domain yet when I'm finished imagining the machine I join
it to our domain, which is just an annoying little step that only takes a few
minutes to do. This is a windows XP SP2 OS.

This machine is different, when I go into my computer|properties I simply
change the corporate domain to our domain under the "Member of", I'm prompted
with username/password it takes about 30 seconds and then says "Welcome to
the domain". This is NOT what happened with this machine. First I got "Your
computer could not be joined to the domain because of the following error:
The specified server cannot perform the requested operation.

I then physically hardcoded the IP address and gave the subnet mask, default
gateway etc... and was able to get on the domain, however, after rebooting
and trying to log into the domain I got "Your account has been disabled". I
went to the DC and sure enough the account had been disabled. I reenabled it
and tried again.

Only to get this logon message "Windows can't connect to the domain, either
because the DC is down or otherwise unavailable or because your computer
account was not found."

I know what the problem is, but can't remedy the situation. When I look in
my computer|properties now I see our domain, but right above it the full
computer name still reads corporate's domain.

I post here first because I KNOW what Lenovo is going to say "I'm not
dealing with what was factory installed".
 
Remove the computer from the domain, reboot and log on locally, and then
re-join it to the domain again. That will delete the existing account that
does not work and replace it with one that does. Do not simply attempt to
delete and manually re-create the account because that won't work either.
Disjoin and rejoin the domain so the PC and the domain both agree on the
account and security used to create the machine account.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm
 
by removing it from the domain, are you saying uncheck the domain, erase
domain name and check workgroup? Sorry to sound so lame, I've always added
machines to the domain, I've never purposly removed them before.

Richard G. Harper said:
Remove the computer from the domain, reboot and log on locally, and then
re-join it to the domain again. That will delete the existing account that
does not work and replace it with one that does. Do not simply attempt to
delete and manually re-create the account because that won't work either.
Disjoin and rejoin the domain so the PC and the domain both agree on the
account and security used to create the machine account.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Penny said:
I received brand new IBM 2 CPU 4300 @ 1.8 GHz. When I receive new machines
corporate has this rule where I have to put their image on it. Although
I'm
not part of their domain yet when I'm finished imagining the machine I
join
it to our domain, which is just an annoying little step that only takes a
few
minutes to do. This is a windows XP SP2 OS.

This machine is different, when I go into my computer|properties I simply
change the corporate domain to our domain under the "Member of", I'm
prompted
with username/password it takes about 30 seconds and then says "Welcome to
the domain". This is NOT what happened with this machine. First I got
"Your
computer could not be joined to the domain because of the following error:
The specified server cannot perform the requested operation.

I then physically hardcoded the IP address and gave the subnet mask,
default
gateway etc... and was able to get on the domain, however, after rebooting
and trying to log into the domain I got "Your account has been disabled".
I
went to the DC and sure enough the account had been disabled. I reenabled
it
and tried again.

Only to get this logon message "Windows can't connect to the domain,
either
because the DC is down or otherwise unavailable or because your computer
account was not found."

I know what the problem is, but can't remedy the situation. When I look
in
my computer|properties now I see our domain, but right above it the full
computer name still reads corporate's domain.

I post here first because I KNOW what Lenovo is going to say "I'm not
dealing with what was factory installed".
Click to expand...
Click to expand...
 
I changed it to WORKGROUP and rebooted, and again attempted to rejoin it to
the domain and it gave me the same identical errors. The full computer name
is still computername.corpdomain

How can I fix this?

Richard G. Harper said:
Remove the computer from the domain, reboot and log on locally, and then
re-join it to the domain again. That will delete the existing account that
does not work and replace it with one that does. Do not simply attempt to
delete and manually re-create the account because that won't work either.
Disjoin and rejoin the domain so the PC and the domain both agree on the
account and security used to create the machine account.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Penny said:
I received brand new IBM 2 CPU 4300 @ 1.8 GHz. When I receive new machines
corporate has this rule where I have to put their image on it. Although
I'm
not part of their domain yet when I'm finished imagining the machine I
join
it to our domain, which is just an annoying little step that only takes a
few
minutes to do. This is a windows XP SP2 OS.

This machine is different, when I go into my computer|properties I simply
change the corporate domain to our domain under the "Member of", I'm
prompted
with username/password it takes about 30 seconds and then says "Welcome to
the domain". This is NOT what happened with this machine. First I got
"Your
computer could not be joined to the domain because of the following error:
The specified server cannot perform the requested operation.

I then physically hardcoded the IP address and gave the subnet mask,
default
gateway etc... and was able to get on the domain, however, after rebooting
and trying to log into the domain I got "Your account has been disabled".
I
went to the DC and sure enough the account had been disabled. I reenabled
it
and tried again.

Only to get this logon message "Windows can't connect to the domain,
either
because the DC is down or otherwise unavailable or because your computer
account was not found."

I know what the problem is, but can't remedy the situation. When I look
in
my computer|properties now I see our domain, but right above it the full
computer name still reads corporate's domain.

I post here first because I KNOW what Lenovo is going to say "I'm not
dealing with what was factory installed".
Click to expand...
Click to expand...
 
Check the event log on the PC and see what errors are logged when you try to
join the computer to the domain.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Penny said:
I changed it to WORKGROUP and rebooted, and again attempted to rejoin it to
the domain and it gave me the same identical errors. The full computer
name
is still computername.corpdomain

How can I fix this?

Richard G. Harper said:
Remove the computer from the domain, reboot and log on locally, and then
re-join it to the domain again. That will delete the existing account
that
does not work and replace it with one that does. Do not simply attempt
to
delete and manually re-create the account because that won't work either.
Disjoin and rejoin the domain so the PC and the domain both agree on the
account and security used to create the machine account.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Penny said:
I received brand new IBM 2 CPU 4300 @ 1.8 GHz. When I receive new
machines
corporate has this rule where I have to put their image on it.
Although
I'm
not part of their domain yet when I'm finished imagining the machine I
join
it to our domain, which is just an annoying little step that only takes
a
few
minutes to do. This is a windows XP SP2 OS.

This machine is different, when I go into my computer|properties I
simply
change the corporate domain to our domain under the "Member of", I'm
prompted
with username/password it takes about 30 seconds and then says "Welcome
to
the domain". This is NOT what happened with this machine. First I got
"Your
computer could not be joined to the domain because of the following
error:
The specified server cannot perform the requested operation.

I then physically hardcoded the IP address and gave the subnet mask,
default
gateway etc... and was able to get on the domain, however, after
rebooting
and trying to log into the domain I got "Your account has been
disabled".
I
went to the DC and sure enough the account had been disabled. I
reenabled
it
and tried again.

Only to get this logon message "Windows can't connect to the domain,
either
because the DC is down or otherwise unavailable or because your
computer
account was not found."

I know what the problem is, but can't remedy the situation. When I
look
in
my computer|properties now I see our domain, but right above it the
full
computer name still reads corporate's domain.

I post here first because I KNOW what Lenovo is going to say "I'm not
dealing with what was factory installed".
Click to expand...
Click to expand...
Click to expand...
 
LSASRV 40961 and W32time 32 errors. I'm going to search the KB for this.

I do know that the server it's trying to connect too is no longer a DC, but
am not sure how to go about fixing it. Would this be in an .ini file
somewhere.

I added entries to the LMHOSTS to see if that would help remedy, and will
get back to that in a little bit. Other things have cropped up elsewhere so
I'll get back to it later to let you know if that solved anything.

Richard G. Harper said:
Check the event log on the PC and see what errors are logged when you try to
join the computer to the domain.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Penny said:
I changed it to WORKGROUP and rebooted, and again attempted to rejoin it to
the domain and it gave me the same identical errors. The full computer
name
is still computername.corpdomain

How can I fix this?

Richard G. Harper said:
Remove the computer from the domain, reboot and log on locally, and then
re-join it to the domain again. That will delete the existing account
that
does not work and replace it with one that does. Do not simply attempt
to
delete and manually re-create the account because that won't work either.
Disjoin and rejoin the domain so the PC and the domain both agree on the
account and security used to create the machine account.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


I received brand new IBM 2 CPU 4300 @ 1.8 GHz. When I receive new
machines
corporate has this rule where I have to put their image on it.
Although
I'm
not part of their domain yet when I'm finished imagining the machine I
join
it to our domain, which is just an annoying little step that only takes
a
few
minutes to do. This is a windows XP SP2 OS.

This machine is different, when I go into my computer|properties I
simply
change the corporate domain to our domain under the "Member of", I'm
prompted
with username/password it takes about 30 seconds and then says "Welcome
to
the domain". This is NOT what happened with this machine. First I got
"Your
computer could not be joined to the domain because of the following
error:
The specified server cannot perform the requested operation.

I then physically hardcoded the IP address and gave the subnet mask,
default
gateway etc... and was able to get on the domain, however, after
rebooting
and trying to log into the domain I got "Your account has been
disabled".
I
went to the DC and sure enough the account had been disabled. I
reenabled
it
and tried again.

Only to get this logon message "Windows can't connect to the domain,
either
because the DC is down or otherwise unavailable or because your
computer
account was not found."

I know what the problem is, but can't remedy the situation. When I
look
in
my computer|properties now I see our domain, but right above it the
full
computer name still reads corporate's domain.

I post here first because I KNOW what Lenovo is going to say "I'm not
dealing with what was factory installed".
Click to expand...
Click to expand...
Click to expand...
 
Neither LMHOSTS not NetBIOS will help you here - to join a domain you need
to have working DNS resolution - that is, the PC trying to join the domain
must be using only the domain DNS server to resolve addresses. If the PC
doesn't have the same DNS settings as a working PC, try setting those
manually and joining the domain.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Penny said:
LSASRV 40961 and W32time 32 errors. I'm going to search the KB for this.

I do know that the server it's trying to connect too is no longer a DC,
but
am not sure how to go about fixing it. Would this be in an .ini file
somewhere.

I added entries to the LMHOSTS to see if that would help remedy, and will
get back to that in a little bit. Other things have cropped up elsewhere
so
I'll get back to it later to let you know if that solved anything.

Richard G. Harper said:
Check the event log on the PC and see what errors are logged when you try
to
join the computer to the domain.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Penny said:
I changed it to WORKGROUP and rebooted, and again attempted to rejoin it
to
the domain and it gave me the same identical errors. The full computer
name
is still computername.corpdomain

How can I fix this?

:

Remove the computer from the domain, reboot and log on locally, and
then
re-join it to the domain again. That will delete the existing account
that
does not work and replace it with one that does. Do not simply
attempt
to
delete and manually re-create the account because that won't work
either.
Disjoin and rejoin the domain so the PC and the domain both agree on
the
account and security used to create the machine account.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


I received brand new IBM 2 CPU 4300 @ 1.8 GHz. When I receive new
machines
corporate has this rule where I have to put their image on it.
Although
I'm
not part of their domain yet when I'm finished imagining the machine
I
join
it to our domain, which is just an annoying little step that only
takes
a
few
minutes to do. This is a windows XP SP2 OS.

This machine is different, when I go into my computer|properties I
simply
change the corporate domain to our domain under the "Member of", I'm
prompted
with username/password it takes about 30 seconds and then says
"Welcome
to
the domain". This is NOT what happened with this machine. First I
got
"Your
computer could not be joined to the domain because of the following
error:
The specified server cannot perform the requested operation.

I then physically hardcoded the IP address and gave the subnet mask,
default
gateway etc... and was able to get on the domain, however, after
rebooting
and trying to log into the domain I got "Your account has been
disabled".
I
went to the DC and sure enough the account had been disabled. I
reenabled
it
and tried again.

Only to get this logon message "Windows can't connect to the domain,
either
because the DC is down or otherwise unavailable or because your
computer
account was not found."

I know what the problem is, but can't remedy the situation. When I
look
in
my computer|properties now I see our domain, but right above it the
full
computer name still reads corporate's domain.

I post here first because I KNOW what Lenovo is going to say "I'm
not
dealing with what was factory installed".
Click to expand...
Click to expand...
Click to expand...
 
Back
Top