Home / server / Questions / 145405
Accepted
Vinko Vrsalovic
Asked: 2010-05-27 03:24:50 +0800 CST

Joining Windows 7 Professional to a Windows Server 2003 R2 x64 domain fails

  • 772

EDIT: I was using WI-FI to connect. Changing the connection to a cabled one made the Win 7 to join the domain successfully. (Have no clue as to why though).

I have a windows 7 professional (spanish, 32-bits) laptop trying to join a Windows Server 2003 (english, 64-bits) domain. The Win7 correctly detects the SRV record, finding the proper domain controller, but then the join fails with the error message (snippet, because the error is in spanish)

An Active Directory Domain Controller for This Domain Could Not be Contacted

The DNS is correctly set, and client can ping by name and IP the server, the server can ping the client by IP. I've tested with the FW down to no avail. A host of other XP Pro clients are connected to the domain. I've restarted Net Logon and checked that Windows Time is up. Also the times are in sync between the server and the client. I'll put below diagnostics output.

The actual question is:

Is there anything special to be done on either the server or the client to have a Win 7 Pro join a 2k3 R2 domain, or it should work right out of the box?.

Of course if you can point out a mistake or some alternatives they'd be welcome.

The following diagnostic information follows:

  • netdiag /q for the DC
  • dcdiag on the DC
  • ipconfig /all on the Win 7 client

netdiag /q on the DC:

..................................

    Computer Name: HI-X2
    DNS Host Name: hi-x2.hi.local
    System info : Microsoft Windows Server 2003 R2 (Build 3790)
    Processor : EM64T Family 6 Model 23 Stepping 10, GenuineIntel
    List of installed hotfixes : 
        KB923561
        KB924667-v2
        KB925398_WMP64
        KB925902
        KB926122
        KB927891
        KB929123
        KB930178
        KB932168
        KB936357
        KB938127
        KB941569
        KB942830
        KB942831
        KB943055
        KB943460
        KB944338-v2
        KB944653
        KB945553
        KB946026
        KB948496
        KB950760
        KB950762
        KB950974
        KB951066
        KB951748
        KB952004
        KB952069
        KB952954
        KB954155
        KB954550-v7
        KB955069
        KB955759
        KB956572
        KB956802
        KB956803
        KB956844
        KB958469
        KB958644
        KB958869
        KB959426
        KB960225
        KB960803
        KB960859
        KB961063
        KB961118
        KB961501
        KB967715
        KB967723
        KB968389
        KB968816
        KB969059
        KB969947
        KB970238
        KB970430
        KB970483
        KB971032
        KB971468
        KB971657
        KB971737
        KB971961
        KB971961-IE8
        KB972270
        KB973037
        KB973354
        KB973507
        KB973540
        KB973687
        KB973815
        KB973825
        KB973869
        KB973904
        KB973917-v2
        KB974112
        KB974318
        KB974392
        KB974571
        KB975025
        KB975467
        KB975560
        KB975713
        KB976662-IE8
        KB977290
        KB977816
        KB977914
        KB978037
        KB978262
        KB978338
        KB978542
        KB978601
        KB978706
        KB979306
        KB979309
        KB979683
        KB980182
        KB980182-IE8
        KB980232
        KB980302-IE8
        KB981332-IE8
        KB981350
        Q147222



Per interface results:

    Adapter : Local Area Connection

        Host Name. . . . . . . . . : hi-x2.hi.local
        IP Address . . . . . . . . : 10.0.1.199
        Subnet Mask. . . . . . . . : 255.0.0.0
        Default Gateway. . . . . . : 10.0.1.1
        Dns Servers. . . . . . . . : 10.0.1.199



        WINS service test. . . . . : Skipped


Global results:
    [WARNING] You don't have a single interface with the  'WorkStation Service',  'Messenger Service',  'WINS' names defined.


DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '10.0.1.199'.

IP Security test . . . . . . . . . : Skipped


The command completed successfully

dcdiag on the DC:


Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\HI-X2
      Starting test: Connectivity
         ......................... HI-X2 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\HI-X2
      Starting test: Replications
         ......................... HI-X2 passed test Replications
      Starting test: NCSecDesc
         ......................... HI-X2 passed test NCSecDesc
      Starting test: NetLogons
         ......................... HI-X2 passed test NetLogons
      Starting test: Advertising
         ......................... HI-X2 passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... HI-X2 passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... HI-X2 passed test RidManager
      Starting test: MachineAccount
         ......................... HI-X2 passed test MachineAccount
      Starting test: Services
         ......................... HI-X2 passed test Services
      Starting test: ObjectsReplicated
         ......................... HI-X2 passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... HI-X2 passed test frssysvol
      Starting test: frsevent
         ......................... HI-X2 passed test frsevent
      Starting test: kccevent
         ......................... HI-X2 passed test kccevent
      Starting test: systemlog
         ......................... HI-X2 passed test systemlog
      Starting test: VerifyReferences
         ......................... HI-X2 passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : hi
      Starting test: CrossRefValidation
         ......................... hi passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... hi passed test CheckSDRefDom

   Running enterprise tests on : hi.local
      Starting test: Intersite
         ......................... hi.local passed test Intersite
      Starting test: FsmoCheck
         ......................... hi.local passed test FsmoCheck

ipconfig /all on the Windows 7 client:


Configuraci¢n IP de Windows

   Nombre de host. . . . . . . . . : hi-p6
   Sufijo DNS principal  . . . . . : 
   Tipo de nodo. . . . . . . . . . : h¡brido
   Enrutamiento IP habilitado. . . : no
   Proxy WINS habilitado . . . . . : no

Adaptador de LAN inal mbrica Conexi¢n de red inal mbrica:

   Sufijo DNS espec¡fico para la conexi¢n. . : 
   Descripci¢n . . . . . . . . . . . . . . . : Intel(R) WiFi Link 5100 AGN
   Direcci¢n f¡sica. . . . . . . . . . . . . : 00-22-FB-63-47-A0
   DHCP habilitado . . . . . . . . . . . . . : no
   Configuraci¢n autom tica habilitada . . . : s¡
   Direcci¢n IPv4. . . . . . . . . . . . . . : 10.0.1.42(Preferido) 
   M scara de subred . . . . . . . . . . . . : 255.255.255.0
   Puerta de enlace predeterminada . . . . . : 10.0.1.1
   Servidores DNS. . . . . . . . . . . . . . : 10.0.1.199
   NetBIOS sobre TCP/IP. . . . . . . . . . . : habilitado

Adaptador de Ethernet Conexi¢n de  rea local:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 
   Descripci¢n . . . . . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Direcci¢n f¡sica. . . . . . . . . . . . . : 00-1E-33-1F-35-B1
   DHCP habilitado . . . . . . . . . . . . . : s¡
   Configuraci¢n autom tica habilitada . . . : s¡

Adaptador de t£nel isatap.{8926581E-09AC-4123-906B-DA6386AD2D60}:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 
   Descripci¢n . . . . . . . . . . . . . . . : Adaptador ISATAP de Microsoft
   Direcci¢n f¡sica. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP habilitado . . . . . . . . . . . . . : no
   Configuraci¢n autom tica habilitada . . . : s¡

Adaptador de t£nel Teredo Tunneling Pseudo-Interface:

   Sufijo DNS espec¡fico para la conexi¢n. . : 
   Descripci¢n . . . . . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Direcci¢n f¡sica. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP habilitado . . . . . . . . . . . . . : no
   Configuraci¢n autom tica habilitada . . . : s¡
   Direcci¢n IPv6 . . . . . . . . . . : 2001:0:5ef5:73ba:1cec:3883:f5ff:fed5(Preferido) 
   V¡nculo: direcci¢n IPv6 local. . . : fe80::1cec:3883:f5ff:fed5%13(Preferido) 
   Puerta de enlace predeterminada . . . . . : ::
   NetBIOS sobre TCP/IP. . . . . . . . . . . : deshabilitado
windows-server-2003 active-directory windows-7

3 Answers

  1. Best Answer

    Are you attempting to join by the FQDN of the domain server? I have had instances where the client wouldn't bind to the domain when using "domainserver" but did see it if I used "domainserver.mydomain.com". I always wrote it off as a quirk in Windows.

    Have you tried connecting the cable to connect it to the domain rather than the wireless link alone?

    • 5

  2. Nope nothing special you need to do to join windows 7 to a 2003 domain.

    The only thing that stands out is your workstation subnet is a /24 but your server subnet is a /8

    Are there any error logs on the windows box when you try to join to the domain?

    • 0

  3. This might depend on the domain level or what it's been upgraded for, and shouldn't matter with 2003 as far as I can tell - but just for fun, try changing the local security policy on the Windows 7 machine to send LM and NTLM responses and only use NTLMv2 when negotiated.

    Local Security Policy Manager -> Local Policies -> Security Options -> Network Secuity: LAN Manager Authentication Level = Send LM & NTLM - use NTLMv2 session security if negotiated.

    And if you try to ping the domain (not a specific DC) will it still return a response from a DC?

    • 0