XP Pro workstations cannot join windows 2003 domain

[Rorik]

Hi,

I hope someone can shed some light on my problem. I have setup a new AD Windows 2003 forest using euro.net. Have DNS setup on the same machine both Forward & Reverse Lookup zones. Confirmed that the PTR records are available. Also setup WINS.
Now if I want try to add a workstation (XP Pro with static IP settings pointing only to the new DC) to the new domain I always get Access Denied.

Did anyone have simular problems? I'll add the NetSetup.log & NetDiag.log output for additional information.

Many thanks in advance for your help!
------------------------------------
NETSETUP.LOG
------------------------------------
10/20 17:15:52 NetpDoDomainJoin
10/20 17:15:52 NetpMachineValidToJoin: 'NLTESTSTTDTD'
10/20 17:15:52 NetpGetLsaPrimaryDomain: status: 0x0
10/20 17:15:52 NetpMachineValidToJoin: status: 0x0
10/20 17:15:52 NetpJoinDomain
10/20 17:15:52 Machine: NLTESTSTTDTD
10/20 17:15:52 Domain: euro
10/20 17:15:52 MachineAccountOU: (NULL)
10/20 17:15:52 Account: euro\administrator
10/20 17:15:52 Options: 0x27
10/20 17:15:52 OS Version: 5.1
10/20 17:15:52 Build number: 2600
10/20 17:15:52 ServicePack: Service Pack 1
10/20 17:15:52 NetpValidateName: checking to see if 'euro' is valid as type 3 name
10/20 17:15:52 NetpCheckDomainNameIsValid [ Exists ] for 'euro' returned 0x0
10/20 17:15:52 NetpValidateName: name 'euro' is valid for type 3
10/20 17:15:52 NetpDsGetDcName: trying to find DC in domain 'euro', flags: 0x1020
10/20 17:15:52 NetpDsGetDcName: found DC '\\AMSTERDAM-DC01' in the specified domain
10/20 17:15:52 NetUseAdd to \\AMSTERDAM-DC01\IPC$ returned 5
10/20 17:15:52 NetpJoinDomain: status of connecting to dc '\\AMSTERDAM-DC01': 0x5
10/20 17:15:52 NetpDoDomainJoin: status: 0x5
---------------------------------
NETDIAG.LOG
---------------------------------
Computer Name: NLTESTSTTDTD
DNS Host Name: NLTESTSTTDTD.euro.net
System info : Windows 2000 Professional (Build 2600)
Processor : x86 Family 6 Model 7 Stepping 3, GenuineIntel
List of installed hotfixes :
KB282010
KB817778
KB820291
KB821253
KB821557
KB822603
KB823559
KB824105
KB824146
Q147222
Q322011
Q323255
Q327979
Q328310
Q329048
Q329115
Q329170
Q329390
Q329441
Q329834
Q331953
Q810243
Q810565
Q810577
Q810833
Q811493
Q811630
Q814033
Q814995
Q815021
Q817287
Q817606
Netcard queries test . . . . . . . : Passed

Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : NLTESTSTTDTD
IP Address . . . . . . . . : 10.130.17.1
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.130.11.1
Primary WINS Server. . . . : 10.130.12.100
Dns Servers. . . . . . . . : 10.130.12.100
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
Dns domain name is not specified.
Dns forest name is not specified.
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{BFB5EB41-70FF-41B2-9280-A4B1F5763506}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{BFB5EB41-70FF-41B2-9280-A4B1F5763506}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{BFB5EB41-70FF-41B2-9280-A4B1F5763506}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Skipped
DC list test . . . . . . . . . . . : Skipped
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Skipped
LDAP test. . . . . . . . . . . . . : Skipped
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.

Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
Service status is: Started
Service startup is: Automatic
IPSec service is available, but no policy is assigned or active
Note: run "ipseccmd /?" for more detailed information

The command completed successfully

 

[Raistlin1022]

Brief thought, for whatever it's worth... configure the DC as a DHCP server and set up all the parameters you want (DNS, WINS, Default Gateway, etc) and try having the server assign it to the client. That might eliminate a setting issue on the client side.

Then try it again.
Damon

Damon Garn
Technical Instructor
MCSE, MCT, CCNA, Linux+, Network+, Security+

 

[ctsolutionsbiz]

I've also found that despite the obnoxious nature of M$ wizards, the network setup wizard has been helpful in connecting XP boxes to 2003. Don't use it on any system with multiple network connections, though or it will bridge them. And you'll need to turn file sharing off afterward.

Also, with XP try using administrator@euro.net instead of euro\administrator

 

[MrDon2003]

Rorik,

I have the same problem and i used the wizards to setup the client (XP Pro) computer.

 

[HKIT]

I found that the TCP/IP settings on the clients are quite sensitve in this respect. Make sure that your DNS is AD-integrated and that it is the first DNS server on the workstations. Also explicitly specify "NETBIOS over TCP/IP" on the workstations, the default setting (depending on DHCP) may not be working correctly. And, as already mentioned, use the wizard to join the domain.