Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Unable to join domain

97 views
Skip to first unread message

Nick

unread,
Oct 11, 2004, 2:43:30 AM10/11/04
to
Hi,
Like many (it would seem from google) I am receiving error 5 (access denied)
when trying to join XP machines to the newly installed SBS domain. Note
that this isn't all XP desktops - just most.

I've tried googling for responses and it would seem that this is an IPC$
share security issue, I've also followed the msdn article that says to do a
"net use \\server\ipc$ /u:user password", and this confirms that error 5 is
being returned when trying to access the IPC$ share. I've tried logging in
under the domain administrator and my own account which has the same
permissions.

However - what is odd is that the command connects correctly using the same
credentials from a machine that has joined the domain succesfully.

The output from netsetup.log is:

10/11
07:17:09 -----------------------------------------------------------------
10/11 07:17:09 NetpValidateName: checking to see if 'SPl' is valid as type 3
name
10/11 07:17:09 NetpCheckDomainNameIsValid [ Exists ] for 'SPl' returned 0x0
10/11 07:17:09 NetpValidateName: name 'SPl' is valid for type 3
10/11
07:17:17 -----------------------------------------------------------------
10/11 07:17:17 NetpDoDomainJoin
10/11 07:17:17 NetpMachineValidToJoin: 'OLASDESK'
10/11 07:17:17 NetpGetLsaPrimaryDomain: status: 0x0
10/11 07:17:17 NetpMachineValidToJoin: status: 0x0
10/11 07:17:17 NetpJoinDomain
10/11 07:17:17 Machine: OLASDESK
10/11 07:17:17 Domain: SPl
10/11 07:17:17 MachineAccountOU: (NULL)
10/11 07:17:17 Account: SPl\administrator
10/11 07:17:17 Options: 0x25
10/11 07:17:17 OS Version: 5.1
10/11 07:17:17 Build number: 2600
10/11 07:17:17 ServicePack: Service Pack 1
10/11 07:17:17 NetpValidateName: checking to see if 'SPl' is valid as type 3
name
10/11 07:17:17 NetpCheckDomainNameIsValid [ Exists ] for 'SPl' returned 0x0
10/11 07:17:17 NetpValidateName: name 'SPl' is valid for type 3
10/11 07:17:17 NetpDsGetDcName: trying to find DC in domain 'SPl', flags:
0x1020
10/11 07:17:17 NetpDsGetDcName: found DC '\\SPLMAIN' in the specified domain
10/11 07:17:17 NetUseAdd to \\SPLMAIN\IPC$ returned 5
10/11 07:17:17 Trying add to \\SPLMAIN\IPC$ using NULL Session
10/11 07:17:17 NetpJoinDomain: status of connecting to dc '\\SPLMAIN': 0x0
10/11 07:17:17 NetpGetLsaPrimaryDomain: status: 0x0
10/11 07:17:17 NetpGetDnsHostName: Read NV Hostname: olasdesk
10/11 07:17:17 NetpGetDnsHostName: PrimaryDnsSuffix defaulted to DNS domain
name: TheSynapsePartnershipLtd.local
10/11 07:17:17 NetpLsaOpenSecret: status: 0xc0000034
10/11 07:17:17 NetpGetLsaPrimaryDomain: status: 0x0
10/11 07:17:17 NetpLsaOpenSecret: status: 0xc0000034
10/11 07:17:18 SamConnect to \\SPLMAIN failed with 0xc0000022
10/11 07:17:18 NetpJoinDomain: status of setting machine password: 0x5
10/11 07:17:18 NetpJoinDomain: initiaing a rollback due to earlier errors
10/11 07:17:18 NetpLsaOpenSecret: status: 0x0
10/11 07:17:18 NetpJoinDomain: rollback: status of deleting secret: 0x0
10/11 07:17:18 NetpJoinDomain: status of disconnecting from '\\SPLMAIN': 0x0
10/11 07:17:18 NetpDoDomainJoin: status: 0x5
10/11
07:17:18 -----------------------------------------------------------------
10/11 07:17:18 NetpDoDomainJoin
10/11 07:17:18 NetpMachineValidToJoin: 'OLASDESK'
10/11 07:17:18 NetpGetLsaPrimaryDomain: status: 0x0
10/11 07:17:18 NetpMachineValidToJoin: status: 0x0
10/11 07:17:18 NetpJoinDomain
10/11 07:17:18 Machine: OLASDESK
10/11 07:17:18 Domain: SPl
10/11 07:17:18 MachineAccountOU: (NULL)
10/11 07:17:18 Account: SPl\administrator
10/11 07:17:18 Options: 0x27
10/11 07:17:18 OS Version: 5.1
10/11 07:17:18 Build number: 2600
10/11 07:17:18 ServicePack: Service Pack 1
10/11 07:17:18 NetpValidateName: checking to see if 'SPl' is valid as type 3
name
10/11 07:17:18 NetpCheckDomainNameIsValid [ Exists ] for 'SPl' returned 0x0
10/11 07:17:18 NetpValidateName: name 'SPl' is valid for type 3
10/11 07:17:18 NetpDsGetDcName: trying to find DC in domain 'SPl', flags:
0x1020
10/11 07:17:18 NetpDsGetDcName: found DC '\\SPLMAIN' in the specified domain
10/11 07:17:18 NetUseAdd to \\SPLMAIN\IPC$ returned 5
10/11 07:17:18 NetpJoinDomain: status of connecting to dc '\\SPLMAIN': 0x5
10/11 07:17:18 NetpDoDomainJoin: status: 0x5

Thanks to anyone who can help - I've been amazed at the good advice I've
recevied over the last few days with other problems I've had - saved me
tearing my hair out!

Nick


Nick

unread,
Oct 11, 2004, 3:04:03 AM10/11/04
to
It would seem that on the machines that cannot join the domain they cannot
access any other shared folder on the server - again with accounts
(including the administrators) that succeed on other machines.


"Nick" <rap...@noemail.nospam> wrote in message
news:OTern21...@TK2MSFTNGP11.phx.gbl...

Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]

unread,
Oct 11, 2004, 3:13:33 AM10/11/04
to
Last time I saw a resolution they reset the security on the system by
resetting the security template. Have you tried that?

--
http://www.sbslinks.com/really.htm
http://www.msmvps.com/bradley
https://www.ecora.com/ecora/jump/pm99.asp

Nick

unread,
Oct 11, 2004, 3:33:52 AM10/11/04
to
Sorry to sound dim - but cna you tell me how to do that?

"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbra...@pacbell.net>
wrote in message news:eJFaSH2r...@TK2MSFTNGP14.phx.gbl...

Marina Roos [SBS-MVP]

unread,
Oct 11, 2004, 3:46:43 AM10/11/04
to
Hi Nick,

Many? You are the first I hear about.
Does the ipconfig/all show that everything is pointing to the server-IP?

Flip that workstation in a workgroup, reboot, don't connect to a share or
whatever, just open IE and run servername/connectcomputer.

--
Regards,

Marina
Microsoft SBS-MVP

"Nick" <rap...@noemail.nospam> schreef in bericht
news:OTern21...@TK2MSFTNGP11.phx.gbl...

Nick

unread,
Oct 11, 2004, 4:15:14 AM10/11/04
to
Hi Marina
Thankyou for the idea - I have tried this, but I get "there was an error"
after the stage where I select which user to add to the machine"

regards
Nick

"Marina Roos [SBS-MVP]" <mar...@roos.nodontwantspam.nl.com> wrote in message
news:uD8B7Z2r...@tk2msftngp13.phx.gbl...

Nick

unread,
Oct 11, 2004, 5:33:23 AM10/11/04
to
Found it - and thankyou!!!! This worked fine and solved the problem.

For anybody else having this problem the link you need is
http://support.microsoft.com/default.aspx?scid=313222

Thanks again
Nick

"Nick" <rap...@noemail.nospam> wrote in message

news:e1ROxS2r...@TK2MSFTNGP15.phx.gbl...

SuperGumby [SBS MVP]

unread,
Oct 11, 2004, 7:38:23 AM10/11/04
to
thank you Nick, always good to hear how a problem is solved.

"Nick" <rap...@noemail.nospam> wrote in message

news:ehYKjV3r...@TK2MSFTNGP12.phx.gbl...

0 new messages