Unable to join domain

[Sjoerd]

Hello,

 

Im new to this forum. While googling for SCCM related problems 9 out a 10 times I found the solution at windows-noob. Thats why Ill try to post my problem here.

 

Ill captured a Windows 7 SP1 machine, and deploying it to our new machines. However theyre not joined to the domain.

 

I found an article about this problem (KB979645) but thats related to a windows 2000 domain, and should be fixed in Windows 7 SP1.

 

Our domain is still running on 2003, the SCCM server is a 2008 R2 Server and were running SCCM 2007 R2.

 

I inseterd a part of my NetSetup.LOG (this is repeating like 100 times):

04/12/2011 22:07:08:000 NetpDoDomainJoin
04/12/2011 22:07:08:000 NetpMachineValidToJoin: 'WIN7TST'
04/12/2011 22:07:08:000 	OS Version: 6.1
04/12/2011 22:07:08:000 	Build number: 7601 (7601.win7sp1_rtm.101119-1850)
04/12/2011 22:07:08:000 	ServicePack: Service Pack 1
04/12/2011 22:07:08:000 	SKU: Windows 7 Enterprise
04/12/2011 22:07:08:000 NetpDomainJoinLicensingCheck: ulLicenseValue=1, Status: 0x0
04/12/2011 22:07:08:000 NetpGetLsaPrimaryDomain: status: 0x0
04/12/2011 22:07:08:000 NetpMachineValidToJoin: status: 0x0
04/12/2011 22:07:08:000 NetpJoinDomain
04/12/2011 22:07:08:000 	Machine: WIN7TST
04/12/2011 22:07:08:000 	Domain: edu.local\ASGDC02.edu.local
04/12/2011 22:07:08:000 	MachineAccountOU: OU=Uitrol,OU=Werkstations,OU=Computers,OU=Albatros,OU=Vestigingen,OU=ASG,DC=edu,DC=local
04/12/2011 22:07:08:000 	Account: [*removed*]
04/12/2011 22:07:08:000 	Options: 0x23
04/12/2011 22:07:08:000 NetpLoadParameters: loading registry parameters...
04/12/2011 22:07:08:000 NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2
04/12/2011 22:07:08:000 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2
04/12/2011 22:07:08:000 NetpLoadParameters: status: 0x2
04/12/2011 22:07:08:000 NetpValidateName: checking to see if 'edu.local' is valid as type 3 name
04/12/2011 22:07:08:109 NetpCheckDomainNameIsValid [ Exists ] for 'edu.local' returned 0x0
04/12/2011 22:07:08:109 NetpValidateName: name 'edu.local' is valid for type 3
04/12/2011 22:07:08:109 NetpJoinDomain: status of connecting to dc '\\ASGDC02.edu.local': 0x0
04/12/2011 22:07:08:109 NetpJoinDomainOnDs: Passed DC 'ASGDC02.edu.local' verified as DNS name '\\ASGDC02.edu.local'
04/12/2011 22:07:08:109 NetpLoadParameters: loading registry parameters...
04/12/2011 22:07:08:109 NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2
04/12/2011 22:07:08:109 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2
04/12/2011 22:07:08:109 NetpLoadParameters: status: 0x2
04/12/2011 22:07:08:109 NetpDsGetDcName: status of verifying DNS A record name resolution for 'ASGDC02.edu.local': 0x0
04/12/2011 22:07:08:109 NetpProvisionComputerAccount:
04/12/2011 22:07:08:109 	lpDomain: edu.local
04/12/2011 22:07:08:109 	lpMachineName: WIN7TST
04/12/2011 22:07:08:109 	lpMachineAccountOU: OU=Uitrol,OU=Werkstations,OU=Computers,OU=Albatros,OU=Vestigingen,OU=ASG,DC=edu,DC=local
04/12/2011 22:07:08:109 	lpDcName: ASGDC02.edu.local
04/12/2011 22:07:08:109 	lpDnsHostName: (NULL)
04/12/2011 22:07:08:109 	lpMachinePassword: (null)
04/12/2011 22:07:08:109 	lpAccount: [*removed*]
04/12/2011 22:07:08:109 	lpPassword: (non-null)
04/12/2011 22:07:08:109 	dwJoinOptions: 0x23
04/12/2011 22:07:08:109 	dwOptions: 0x40000003
04/12/2011 22:07:08:109 NetpLdapBind: Verified minimum encryption strength on ASGDC02.edu.local: 0x0
04/12/2011 22:07:08:109 NetpLdapGetLsaPrimaryDomain: reading domain data
04/12/2011 22:07:08:109 NetpGetNCData: Reading NC data
04/12/2011 22:07:08:109 NetpGetDomainData: Lookup domain data for: DC=edu,DC=local
04/12/2011 22:07:08:109 NetpGetDomainData: Lookup crossref data for: CN=Partitions,CN=Configuration,DC=edu,DC=local
04/12/2011 22:07:08:109 NetpLdapGetLsaPrimaryDomain: result of retrieving domain data: 0x0
04/12/2011 22:07:08:109 NetpGetComputerObjectDn: Cracking DNS domain name edu.local/ into Netbios on \\ASGDC02.edu.local
04/12/2011 22:07:08:109 NetpGetComputerObjectDn: Crack results: 	name = EDU\
04/12/2011 22:07:08:109 NetpGetComputerObjectDn: Cracking account name EDU\WIN7TST$ on \\ASGDC02.edu.local
04/12/2011 22:07:08:109 NetpGetComputerObjectDn: Crack results: 	Account does not exist
04/12/2011 22:07:08:109 NetpGetComputerObjectDn: Got DN CN=WIN7TST,OU=Uitrol,OU=Werkstations,OU=Computers,OU=Albatros,OU=Vestigingen,OU=ASG,DC=edu,DC=local from the passed OU
04/12/2011 22:07:08:109 NetpModifyComputerObjectInDs: Initial attribute values:
04/12/2011 22:07:08:109 		objectClass  =  Computer
04/12/2011 22:07:08:109 		SamAccountName  =  WIN7TST$
04/12/2011 22:07:08:109 		userAccountControl  =  0x1000
04/12/2011 22:07:08:109 		DnsHostName  =  WIN7TST.edu.local
04/12/2011 22:07:08:109 		ServicePrincipalName  =  HOST/WIN7TST.edu.local  RestrictedKrbHost/WIN7TST.edu.local  HOST/WIN7TST  RestrictedKrbHost/WIN7TST
04/12/2011 22:07:08:109 		unicodePwd  =  <SomePassword>
04/12/2011 22:07:08:109 NetpModifyComputerObjectInDs: Computer Object does not exist in OU
04/12/2011 22:07:08:109 NetpModifyComputerObjectInDs: Attribute values to set:
04/12/2011 22:07:08:109 		objectClass  =  Computer
04/12/2011 22:07:08:109 		SamAccountName  =  WIN7TST$
04/12/2011 22:07:08:109 		userAccountControl  =  0x1000
04/12/2011 22:07:08:109 		DnsHostName  =  WIN7TST.edu.local
04/12/2011 22:07:08:109 		ServicePrincipalName  =  HOST/WIN7TST.edu.local  RestrictedKrbHost/WIN7TST.edu.local  HOST/WIN7TST  RestrictedKrbHost/WIN7TST
04/12/2011 22:07:08:109 		unicodePwd  =  <SomePassword>
04/12/2011 22:07:08:109 NetpMapGetLdapExtendedError: Parsed [0x2010] from server extended error string: 00002010: SvcErr: DSID-031A11E5, problem 5003 (WILL_NOT_PERFORM), data 0
04/12/2011 22:07:08:109 NetpModifyComputerObjectInDs: ldap_add_s failed: 0x35 0x3eb
04/12/2011 22:07:08:109 NetpCreateComputerObjectInDs: NetpModifyComputerObjectInDs failed: 0x3eb
04/12/2011 22:07:08:109 NetpCreateComputerObjectInDsW2K: Try again setting password separately from creation i.e. DC may be W2K
04/12/2011 22:07:08:109 NetpGetComputerObjectDn: Cracking DNS domain name edu.local/ into Netbios on \\ASGDC02.edu.local
04/12/2011 22:07:08:109 NetpGetComputerObjectDn: Crack results: 	name = EDU\
04/12/2011 22:07:08:109 NetpGetComputerObjectDn: Cracking account name EDU\WIN7TST$ on \\ASGDC02.edu.local
04/12/2011 22:07:08:109 NetpGetComputerObjectDn: Crack results: 	Account does not exist
04/12/2011 22:07:08:125 NetpGetComputerObjectDn: Got DN CN=WIN7TST,OU=Uitrol,OU=Werkstations,OU=Computers,OU=Albatros,OU=Vestigingen,OU=ASG,DC=edu,DC=local from the passed OU
04/12/2011 22:07:08:125 NetpModifyComputerObjectInDs: Initial attribute values:
04/12/2011 22:07:08:125 		objectClass  =  Computer
04/12/2011 22:07:08:125 		SamAccountName  =  WIN7TST$
04/12/2011 22:07:08:125 		userAccountControl  =  0x1000
04/12/2011 22:07:08:125 		DnsHostName  =  WIN7TST.edu.local
04/12/2011 22:07:08:125 		ServicePrincipalName  =  HOST/WIN7TST.edu.local  RestrictedKrbHost/WIN7TST.edu.local  HOST/WIN7TST  RestrictedKrbHost/WIN7TST
04/12/2011 22:07:08:125 NetpModifyComputerObjectInDs: Computer Object does not exist in OU
04/12/2011 22:07:08:125 NetpModifyComputerObjectInDs: Attribute values to set:
04/12/2011 22:07:08:125 		objectClass  =  Computer
04/12/2011 22:07:08:125 		SamAccountName  =  WIN7TST$
04/12/2011 22:07:08:125 		userAccountControl  =  0x1000
04/12/2011 22:07:08:125 		DnsHostName  =  WIN7TST.edu.local
04/12/2011 22:07:08:125 		ServicePrincipalName  =  HOST/WIN7TST.edu.local  RestrictedKrbHost/WIN7TST.edu.local  HOST/WIN7TST  RestrictedKrbHost/WIN7TST
04/12/2011 22:07:08:125 NetpMapGetLdapExtendedError: Parsed [0x2010] from server extended error string: 00002010: SvcErr: DSID-031A11E5, problem 5003 (WILL_NOT_PERFORM), data 0
04/12/2011 22:07:08:125 NetpModifyComputerObjectInDs: ldap_add_s failed: 0x35 0x3eb
04/12/2011 22:07:08:125 NetpCreateComputerObjectInDs: NetpModifyComputerObjectInDs failed: 0x3eb
04/12/2011 22:07:08:125 ldap_unbind status: 0x0
04/12/2011 22:07:08:125 NetpJoinDomainOnDs: Function exits with status of: 0x3eb
04/12/2011 22:07:08:125 NetpJoinDomainOnDs: status of disconnecting from '\\ASGDC02.edu.local': 0x0
04/12/2011 22:07:08:125 NetpDoDomainJoin: status: 0x3eb

 

Does someone has a clue?

[magu01]

Did you misspell Workstation in the OU to put your computer in? It reads werkstations!

[magu01]

Removed

[Sjoerd]

Did you misspell Workstation in the OU to put your computer in? It reads werkstations!

This is definitely the correct OU, Werkstations is duth for workstations.

I selected the OU using the browse option in the task sequence.

[Lucid]

Does the account you are using in the task sequence have rights to create computer account objects in that OU?

 

DSACLS.exe "ou=YourOU,DC=yourdomain,DC=com" /I:T /G YourDomain\AccountName:CC;computer