can't join NT workstation to a 2003 domain

[volk125]

my domain is at the 2003 functional level however that shouldn't impact the workstations though... when I join without credentials it says "can't create account, check your credentials", when I enter my admin user and passw then it says "can't locate the domain controller". What is this about? that workstation was just unjoined from a windows 2000 domain and trying to join 2003. Any help would be appreciated. Thanks.

 

[volk125]

oh, forgot to mention. all network config seems fine. I can ping the 2003 ad controller no problem, by ip or by name so my guess is the DNS is resolving properly.

 

[wolluf]

So you unjoined workstation from 2k server domain, and put it in a workgroup? Restarted - logged on as local admin, joined 2k3 server domain & supplied 2k3 domain admin credentials to authorise? PC name remains the same?

 

[volk125]

unjoined 2k domain, logged in as admin, did not join 2003 domain because it won't allow me to do so. That's where it stops. As I have learned from somebody it is not possible to join an NT workstation to 2003 domain due to some security hash differences or something like that. oh well... whatcha gonna do.

 

[FAM]

Has the NT PC been added to the domain via the server management console?

 

[volk125]

tried that too

 

[doyle043]

Having the exact same problem. Unjoined an NT workstation from a 2000 domain. Rebooted it. Attempting to join it to a 2003 domain (2000 native functional level) fails. Even created a computer object with pre-2000 name. I get "cannot find domain controller".

 

[volk125]

It will not work. Don't waste your time and just add a local user and then the same user and password on domain to be able to access shares on the server without being asked for credentials every time. For printing download a driver and setup an IP port for it (that's if you have network printers) If you have any kind of CRM(based on SQL), it should work fine. Symantec Corporate will also work without the machine being joined to domain. It's not a big deal really, just no security policies and all that, but it doesn't matter if you only got a couple or just one.