Adding New Notebooks To Domain

[rjenk]

I have just recently added two new desktop computer and two new notebooks to
our site. All equipment is newly purchased from Dell. Both desktops
installed without a hitch but the two notebooks refuse to cooperate.

Notebooks are Vostro 1520s running Window XP SP3. They connect to the
network, I can run //server/connectcomputer and it will initiate the client
setup. The setup reboots and logs in to finalize the installation and does a
final reboot. After that I attempt to login to the domain and I am told the
domain cannot be found. At that point I can login local and can ping the
server by name, look at shares, etc.

I have removed the systems from the domain and put them back in workgroups
and tried joining again but have the same results. I reloaded Windows XP
using the restore disk, same results.

There are no issues with DNS or DHCP. Quite frankly I am at a loss of why
they will not connect. I have the SBS setup logs that I will post.

Any insight would be appreciated.

[rjenk]

SBSNetSetup.log (Domain Name was replaced)

8/20/2009 9:04 PM
-- Starting SBS Net Setup --
found [48] keys
CProfileList::CProfileList() - added [1003, C:\Documents and Settings\Admin]
to the profile dir map
CProfileList::CProfileList() - added [1004, C:\Documents and
Settings\__sbs_netsetup__] to the profile dir map
CProfileList::CProfileList() - added [1005, C:\Documents and
Settings\__sbs_netsetup__.TCNB03] to the profile dir map
CProfileList::CProfileList() - added [1006, C:\Documents and
Settings\adduser] to the profile dir map
CProfileList::CProfileList() - added [adduser, C:\Documents and
Settings\adduser] to the profile dir map
CProfileList::CProfileList() - added [Admin, C:\Documents and
Settings\Admin] to the profile dir map
CAuthPage::OnNotify() - PSN_WIZNEXT - User Name: adduser
CAuthPage::GetUsersAndComputers() - ADsOpenObject( LDAP://TC1.-=Domain
Name=-.local/DC=-=Domain Name=-,DC=local, adduser, [PW] )
CAuthPage::GetUsersAndComputers() - ADsOpenObject( LDAP://TC1.-=Domain
Name=-.local/DC=-=Domain Name=-,DC=local, adduser, [PW] )
OpenXMLFile() - DOMDocument::load( C:\Program Files\Microsoft Windows Small
Business Server\Clients\usermap.txt ) failed - [1]
CProfileList::IsPrivateProfile( adduser )
CProfileList::IsPrivateProfile() - starting the search [C:\Documents and
Settings\adduser]
CWizard::PrepAutoLogon()
CWizard::PrepAutoLogon() - runonce key set
CWizard::PrepAutoLogon() - setting DefaultDomainName_PostMigrate to
[-=Domain Name=-], [0]
FinishNetworkingSetup()
CWizard::FinishNetworkingSetup() - outputting XML file
FinishNetworkingSetup() -- calling NetJoinDomain( NULL, -=Domain
Name=-.local, ou=sbscomputers,ou=computers,ou=mybusiness,dc=-=Domain
Name=-,dc=local, -=Domain Name=-.local\adduser, [pw], 359 )
FinishNetworkingSetup() - succeeded
CWizard::DeleteCSAllUsers() -- deleting
'HKEY_USERS\.DEFAULT\software\microsoft\smallbusinessserver\clientsetup'
CWizard::DeleteCSAllUsers() -- deleting
'HKEY_USERS\S-1-5-19\software\microsoft\smallbusinessserver\clientsetup'
CWizard::DeleteCSAllUsers() -- deleting
'HKEY_USERS\S-1-5-19_Classes\software\microsoft\smallbusinessserver\clientsetup'
CWizard::DeleteCSAllUsers() -- deleting
'HKEY_USERS\S-1-5-20\software\microsoft\smallbusinessserver\clientsetup'
CWizard::DeleteCSAllUsers() -- deleting
'HKEY_USERS\S-1-5-20_Classes\software\microsoft\smallbusinessserver\clientsetup'
CWizard::DeleteCSAllUsers() -- deleting
'HKEY_USERS\S-1-5-21-343818398-2077806209-1801674531-1006\software\microsoft\smallbusinessserver\clientsetup'
CWizard::DeleteCSAllUsers() -- deleting
'HKEY_USERS\S-1-5-21-343818398-2077806209-1801674531-1006_Classes\software\microsoft\smallbusinessserver\clientsetup'
CWizard::DeleteCSAllUsers() -- deleting
'HKEY_USERS\S-1-5-18\software\microsoft\smallbusinessserver\clientsetup'
Reboot() -- about to reboot

[rjenk]

sbsmig.log (Domain name chagned)

8/20/2009 9:07 PM
-- Starting sbsmig.exe --
AddUsersToLocalAdmin() -- calling NetLocalGroupAddMembers( Administrators,
domain_name.local\adduser )
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddUsersToLocalAdmin() - NetLocalGroupAddMembers() failed -- nas == [1789]
AddDomainUserToRemoteDesktopGroup() -- we're not a server, not adding domain
users group to remote desktop group
calling SetComputerNameEx( TCNB08 )
ChangeComputerName() -- decrypt(1) OK
ChangeComputerName() -- decrypt(2) OK
RemoveAccount() -- ADsOpenObject() failed [-2147467259]
ChangeComputerName() -- RemoveAccount() failed, dwErr = [-2147467259]
ChangeComputerName() -- NetRenameMachineInDomain() failed, dwErr = [2224]
ChangeIPAddress() -- we're not a server, not changing the IP config
Successfully taking ownership of C:\Documents and Settings\adduser
Successfully setting DACL of C:\Documents and Settings\adduser
Failed to set new ownership to C:\Documents and Settings\adduser [1307]
Failed to set Built-in Admin as owner of the profile C:\Documents and
Settings\adduser, [1307]
Migrate() -- command - ["C:\Program Files\Microsoft Windows Small Business
Server\Clients\moveuser.exe" "adduser" "domain_name.local\adduser" /y /k >
C:\PROGRA~1\MICROS~2\Clients\mutemp.log]
Migrate() -- strBat - [C:\Program Files\Microsoft Windows Small Business
Server\Clients\run.bat]
Migrate() -- calling BCreateProcess(), strCommand - [cmd.exe /c "C:\Program
Files\Microsoft Windows Small Business Server\Clients\run.bat"]
DeleteSBSFile() -- DeleteFile( C:\Program Files\Microsoft Windows Small
Business Server\Clients\sbsmig.exe ) failed -- GLE = [5]
running logoff command [C:\Program Files\Microsoft Windows Small Business
Server\Clients\sbsmig.exe] [C:\Program Files\Microsoft Windows Small Business
Server\Clients\sbsmig.exe /l]
-- Exiting sbsmig.exe --

8/20/2009 9:07 PM
-- Starting sbsmig.exe --
running with the /l switch
WinMain() - calling DwWaitForShell()
WinMain() - calling ExitWindowsEx()
WinMain() - ExitWindowsEx() returned [1] - GLE() - [183]
-- Exiting sbsmig.exe --

[rjenk]

moveuser.log (Domain name changed)
NOTE: 'admin' user was created as a local account and there is an admin on
the domain. During connectcomputer setup, the local/admin was matched with
domain/admin.

MigrateProfiles() - ran ["C:\Program Files\Microsoft Windows Small Business
Server\Clients\moveuser.exe" "Admin" "domain_name.local\Admin" /y /k >
C:\PROGRA~1\MICROS~2\Clients\mutemp.log]. output:
Moving profile from TCN-FBAE552FB92\Admin to domain_name.local\Admin...

Move failed.

Error 1317
The specified user does not exist.

[Cliff Galiher]

rjenk: The fact that the desktops worked tells me that your SBS
infrastructure is *probably* fine, although I'd run the SBS BPA to be sure.

This sounds like a simple case of "extra" stuff that Dell did to the image
so, of course, restoring with their disk produces the same results.

1) Uninstall any and all 3rd party security products. I'm hoping that you
have some sort of corporate software with appropriate licenses, so the Dell
shipped stuff is unnecessary.

2) While still unjoined, log on as a local admin and remove all of the
firewall rules. The logic here is that Dell may have pre-hardened the OS
and that is interfering with domain functionality. Furthermore, I always
recommend controlling Windows Firewall through group policy so the "local"
rules are unnecessary in this scenario.

3) Disable any wireless adapters that may exist on the machine. Do
everything on the wire. Once you get things working you can start enabling
things again.

4) If things *still* don't work, Dell may have even messed with the local
security policy. MS provides standardized templates you can load and thus
undo those changes....and again the idea here is that changes to the
security policy should not be done locally, but through group policy.

Let's see if that works first, and if not then we can start digging into the
machine.

-Cliff

"rjenk" <rj...@discussions.microsoft.com> wrote in message
news:EBA04F18-8D31-45F2...@microsoft.com...

[Ace Fekay [MCT]]

"rjenk" <rj...@discussions.microsoft.com> wrote in message

news:AF2FDA64-85CD-4E05...@microsoft.com...

Hello Rjenk,

I realize you hid your domain name, no problem. However I saw in this post a
domain name in the format of "domain_name.local." It has an underscore in
it. Does the actual name have an underscore in it?

Also, please post an unedited ipconfig /all. This is to just eliminate a
possible misconfiguration. You can hide the domain name, but try to keep the
name in the original format (replacing the actual name), as well as allow us
to look at the IPs as they are - after all, they're private anyway, and
secure.

Any event log errors? Post the eventID# and source names, please.

Also, please run the following and post any errors or failures:
dcdiag /v
netdiag /v

I assume you've ran the wizard on the SBS server?

Just conjecturing, it could also be something simple as attempting to do
this using a wireless connection and traffic is being blocked through the
AP, or the AP is in NAT mode and not 'corp' mode.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

[Ace Fekay [MCT]]

"Cliff Galiher" <cgal...@gmail.com> wrote in message
news:eOTlOfhI...@TK2MSFTNGP05.phx.gbl...

> rjenk: The fact that the desktops worked tells me that your SBS
> infrastructure is *probably* fine, although I'd run the SBS BPA to be
> sure.
>
> This sounds like a simple case of "extra" stuff that Dell did to the image
> so, of course, restoring with their disk produces the same results.
>
> 1) Uninstall any and all 3rd party security products. I'm hoping that you
> have some sort of corporate software with appropriate licenses, so the
> Dell shipped stuff is unnecessary.
>
> 2) While still unjoined, log on as a local admin and remove all of the
> firewall rules. The logic here is that Dell may have pre-hardened the OS
> and that is interfering with domain functionality. Furthermore, I always
> recommend controlling Windows Firewall through group policy so the "local"
> rules are unnecessary in this scenario.
>
> 3) Disable any wireless adapters that may exist on the machine. Do
> everything on the wire. Once you get things working you can start
> enabling things again.
>
> 4) If things *still* don't work, Dell may have even messed with the local
> security policy. MS provides standardized templates you can load and thus
> undo those changes....and again the idea here is that changes to the
> security policy should not be done locally, but through group policy.
>
> Let's see if that works first, and if not then we can start digging into
> the machine.
>
> -Cliff

I guess I went overboard! :-)

Ace