Friday, July 20, 2018

Windows 7 Client Can't Join Server's Active Directory Domain

I am currently helping my company prototype automated Windows installation via network. I am using Server 2008r2 and Windows Deployment Services with Windows 7 as the OS being installed on the client computer. Everything works fine EXCEPT joining the client PC to the domain. DNS is configured correctly, client computer is already prestaged in Active Directory Computers as the user "Client1" with a password of "password". I have posted my unattend xml file and the relevant section of the Panther/UnattendGC setupact.log and setuperr.log files.



Setupact.log:




2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: Begin



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: Loading input parameters...



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: AccountData = [NULL]



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: UnsecureJoin = [NULL]



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: MachinePassword = [secret not logged]




2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: JoinDomain = [master.local]



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: JoinWorkgroup = [NULL]



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: Domain = [master.local]



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: Username = [Client1]



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: Password = [secret not logged]




2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: MachineObjectOU = [NULL]



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: DebugJoin = [false]



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: DebugJoinOnlyOnThisError = [NULL]



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: Checking that auto start services have started.



2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: Joining domain [master.local]...




2017-06-29 09:25:04, Info [DJOIN.EXE] Unattended Join: Calling DsGetDcName for master.local...



2017-06-29 09:25:04, Warning [DJOIN.EXE] Unattended Join: DsGetDcName failed: 0x2746, last error is 0x0, will retry in 5 seconds...
[[[My personal note: At this point it retries and displays the above error many more times before finally quitting]]]



2017-06-29 09:32:04, Error [DJOIN.EXE] Unattended Join: NetJoinDomain failed error code is [10054]



2017-06-29 09:32:04, Error [DJOIN.EXE] Unattended Join: Unable to join; gdwError = 0x2746



2017-06-29 09:32:04, Info [DJOIN.EXE] Unattended Join: Exit, returning 0x0




Setuperr.log:



2017-06-29 09:32:04, Error [DJOIN.EXE] Unattended Join: NetJoinDomain failed error code is [10054]



2017-06-29 09:32:04, Error [DJOIN.EXE] Unattended Join: Unable to join; gdwError = 0x2746



Unattend.xml:









*SENSITIVE*DATA*DELETED*
master.local
true
5
Client1


MyCompany
MyCompany
eastern standard time

*SENSITIVE*DATA*DELETED*






122.45.36.1

false
master.local
true
Local Area Connection


master.local
false


master.local





master.local
*SENSITIVE*DATA*DELETED*
Client1


master.local
false






32

96
1280
60
1024


*SENSITIVE*DATA*DELETED*


master.local


Domain Users
Client1





*SENSITIVE*DATA*DELETED*
MyCompany

MyCompany
MyCompany
Administrators



eastern standard time
MyCompany
MyCompany


true
true
Work
1



en-us
en-us
en-us

en-us
en-us





I have already tried turning true and it still didn’t work. Notably, I didn’t include credentials when I set UnsecureJoin to true because you are NOT supposed to include credentials when performing UnsecureJoin. Additionally, I tried variations of UnsecureJoin=true with MachinePassword set to that machine’s local admin account password and also with the MachinePassword field blank and it STILL did not work.



Can someone help me figure out why the client pc is not joining the domain at all? Additionally, DsGetDCName error code 0x2746 and NetJoinDomain error code 10054 seem to be undocumented, so any insight into these error codes would be greatly appreciated?

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...