Return to site

Join Domain Cannot Complete This Function

broken image


But not the tricky part, how do I correlate (same userId, same sessionId) from domain.com to shop.domain.com honestly I am more concerned about both 'front-ends' sharing the same userId then the back-end, but maybe the back-end is needed as a 'AI user manager' or something to correlate things. Trying to join it to one of our three domains.Domain 1 is the one at the physical site I'm at, Domain 2 is the one I'm trying to join.there is a DC onsite for Domain 2.and domain 3 is being built and doesn't exist at the physical site but is available from the domain drop-down list due to VPN access.

-->

This article helps fix an issue where users can't join a computer to an Active Directory domain.

  1. You can quickly check whether your computer is part of a domain or not. Open the Control Panel, click the System and Security category, and click System. Look under 'Computer name, domain and workgroup settings' here. If you see 'Domain': followed by the name of a domain, your computer is joined to a domain.
  2. The command failed to complete successfully. Cannot join domain. W2K3: Domain not reachable via DNS-name.

Applies to: Windows 7 Service Pack 1, Windows Server 2012 R2
Original KB number: 2008652

Symptoms

You try to join a Windows Server 2008 R2 or a Windows 7 machine to an Active Directory domain using Computer Name/Domain Changes under System Properties.
The destination domain has either Windows 2000, Windows Server 2003, or Windows Server 2008 domain controllers and may have Windows NT 4.0 domain controllers present.When trying to join the Windows Server 2008 R2 machine to the domain by specifying the fully qualified domain name (FQDN) in the domain join UI, the operation fails and you receive the error:

Join domain cannot complete this function

Microsoft office for mac torrent 2008. An Active Directory Domain Controller (AD DC) for the domain couldn't be contacted
Ensure that the domain name is typed correctly

In the %windir%debugNetsetup.log on the client you see the following sequence:

NetpValidateName: checking to see if 'CLIENT-NAME' is valid as type 1 name
NetpCheckNetBiosNameNotInUse for 'CLIENT-NAME'[MACHINE] returned 0x0
NetpValidateName: name 'CLIENT-NAME' is valid for type 1

Join Domain Cannot Complete This Function Without

NetpValidateName: checking to see if 'CLIENT-NAME' is valid as type 5 name
NetpValidateName: name 'CLIENT-NAME' is valid for type 5

Join Domain Error Cannot Complete This Function

NetpValidateName: checking to see if domain.com is valid as type 3 name
NetpCheckDomainNameIsValid for domain.com returned 0x54b, last error is 0x0
NetpCheckDomainNameIsValid [ Exists ] for domain.com returned 0x54b

When trying to join the Windows Server 2008 R2 computer to the domain by specifying the NetBIOS name in the domain join UI, you receive a different error:

Join Domain Cannot Complete This Function Based

The following error occurred attempting to join the domain . The specified domain either does not exist or could not be contacted.

Function

In the %windir%debugNetsetup.log on the client you see the following sequence:

-----------------------------------------------------------------
NetpDoDomainJoin
NetpMachineValidToJoin: 'CLIENT-NAME'
OS Version: 6.1
Build number: 7600 (7600.win7_rtm.090713-1255)
SKU: Windows Server 2008 R2 Enterprise
NetpDomainJoinLicensingCheck: ulLicenseValue=1, Status: 0x0
NetpGetLsaPrimaryDomain: status: 0x0
NetpMachineValidToJoin: status: 0x0
NetpJoinDomain
Machine: CLIENT-NAME
Domain: Domain_Name
MachineAccountOU: (NULL)
Account: Domain_Nameadmx054085
Options: 0x27
NetpLoadParameters: loading registry parameters..
NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2
NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2
NetpLoadParameters: status: 0x2
NetpValidateName: checking to see if 'Domain_Name' is valid as type 3 name
NetpValidateName: 'Domain_Name' is not a valid Dns domain name: 0x2554
NetpCheckDomainNameIsValid [ Exists ] for 'Domain_Name' returned 0x0
NetpValidateName: name 'Domain_Name' is valid for type 3
NetpDsGetDcName: trying to find DC in domain 'Domain_Name', flags: 0x40001010
NetpDsGetDcName: failed to find a DC in the specified domain: 0x54b, last error is 0x0
NetpJoinDomainOnDs: NetpDsGetDcName returned: 0x54b
NetpJoinDomainOnDs: Function exits with status of: 0x54b
NetpDoDomainJoin: status: 0x54b

Domain joins by Windows Server 2003 computers to the same target domain succeed by specifying the NetBIOS domain name in the domain join UI. Domain joins using the FQDN also fail.
You can also successfully join the same Windows Server 2008 R2 machine to a different Active Directory domain in the same forest specifying the FQDN domain name.

Cause

The errors occur if NT4Emulator is set to 0x1 in the following registry subkey of the helper domain controller used to join the target domain:
HKEY_LOCAL_MACHINESystemCurrentControlSetServicesNetlogonParameters
Value Name: NT4Emulator
Value Type: REG_DWORD
Value Data: 1

Resolution

To resolve this issue either delete the NT4Emulator registry value on the Active Directory domain controllers in the destination domain if Windows NT 4.0 domain controllers are no longer present or can be retired. Otherwise, set the following registry value on the Windows 7 or Windows Server 2008 R2 client before attempting to join the domain:

  1. Start Registry Editor (Regedit.exe).

  2. Locate the following key in the registry:

    HKEY_LOCAL_MACHINESystemCurrentControlSetServicesNetlogonParameters

  3. If it does not exist, create a new REG_DWORD value named NeutralizeNT4Emulator, and set the value to 0x1.

  4. Quit Registry Editor.

This registry setting allows the Active Directory domain controllers with the NT4Emulator setting to respond normally to the requesting client (avoiding Windows NT 4.0 emulation mode).

Cannot

More information

Join domain cannot complete this function without

Microsoft office for mac torrent 2008. An Active Directory Domain Controller (AD DC) for the domain couldn't be contacted
Ensure that the domain name is typed correctly

In the %windir%debugNetsetup.log on the client you see the following sequence:

NetpValidateName: checking to see if 'CLIENT-NAME' is valid as type 1 name
NetpCheckNetBiosNameNotInUse for 'CLIENT-NAME'[MACHINE] returned 0x0
NetpValidateName: name 'CLIENT-NAME' is valid for type 1

Join Domain Cannot Complete This Function Without

NetpValidateName: checking to see if 'CLIENT-NAME' is valid as type 5 name
NetpValidateName: name 'CLIENT-NAME' is valid for type 5

Join Domain Error Cannot Complete This Function

NetpValidateName: checking to see if domain.com is valid as type 3 name
NetpCheckDomainNameIsValid for domain.com returned 0x54b, last error is 0x0
NetpCheckDomainNameIsValid [ Exists ] for domain.com returned 0x54b

When trying to join the Windows Server 2008 R2 computer to the domain by specifying the NetBIOS name in the domain join UI, you receive a different error:

Join Domain Cannot Complete This Function Based

The following error occurred attempting to join the domain . The specified domain either does not exist or could not be contacted.

In the %windir%debugNetsetup.log on the client you see the following sequence:

-----------------------------------------------------------------
NetpDoDomainJoin
NetpMachineValidToJoin: 'CLIENT-NAME'
OS Version: 6.1
Build number: 7600 (7600.win7_rtm.090713-1255)
SKU: Windows Server 2008 R2 Enterprise
NetpDomainJoinLicensingCheck: ulLicenseValue=1, Status: 0x0
NetpGetLsaPrimaryDomain: status: 0x0
NetpMachineValidToJoin: status: 0x0
NetpJoinDomain
Machine: CLIENT-NAME
Domain: Domain_Name
MachineAccountOU: (NULL)
Account: Domain_Nameadmx054085
Options: 0x27
NetpLoadParameters: loading registry parameters..
NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2
NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2
NetpLoadParameters: status: 0x2
NetpValidateName: checking to see if 'Domain_Name' is valid as type 3 name
NetpValidateName: 'Domain_Name' is not a valid Dns domain name: 0x2554
NetpCheckDomainNameIsValid [ Exists ] for 'Domain_Name' returned 0x0
NetpValidateName: name 'Domain_Name' is valid for type 3
NetpDsGetDcName: trying to find DC in domain 'Domain_Name', flags: 0x40001010
NetpDsGetDcName: failed to find a DC in the specified domain: 0x54b, last error is 0x0
NetpJoinDomainOnDs: NetpDsGetDcName returned: 0x54b
NetpJoinDomainOnDs: Function exits with status of: 0x54b
NetpDoDomainJoin: status: 0x54b

Domain joins by Windows Server 2003 computers to the same target domain succeed by specifying the NetBIOS domain name in the domain join UI. Domain joins using the FQDN also fail.
You can also successfully join the same Windows Server 2008 R2 machine to a different Active Directory domain in the same forest specifying the FQDN domain name.

Cause

The errors occur if NT4Emulator is set to 0x1 in the following registry subkey of the helper domain controller used to join the target domain:
HKEY_LOCAL_MACHINESystemCurrentControlSetServicesNetlogonParameters
Value Name: NT4Emulator
Value Type: REG_DWORD
Value Data: 1

Resolution

To resolve this issue either delete the NT4Emulator registry value on the Active Directory domain controllers in the destination domain if Windows NT 4.0 domain controllers are no longer present or can be retired. Otherwise, set the following registry value on the Windows 7 or Windows Server 2008 R2 client before attempting to join the domain:

  1. Start Registry Editor (Regedit.exe).

  2. Locate the following key in the registry:

    HKEY_LOCAL_MACHINESystemCurrentControlSetServicesNetlogonParameters

  3. If it does not exist, create a new REG_DWORD value named NeutralizeNT4Emulator, and set the value to 0x1.

  4. Quit Registry Editor.

This registry setting allows the Active Directory domain controllers with the NT4Emulator setting to respond normally to the requesting client (avoiding Windows NT 4.0 emulation mode).

More information

In the case of the join by FQDN, the joining client does not receive an adequate response to the LDAP pings it sends to the domain controllers at the beginning of the domain join process. The helper domain controller responds but the joining client considers the response incomplete.

After receiving the same replies from all domain controllers located using DNS, it falls back to performing a NetBIOS name query for the FQDN domain name to locate a domain controller, however this gets no response and the join operation fails.If the NetBIOS scenario the client sends a NetLogonSamRequest to all domain controllers it receives from the WINS query for the domain name. However it receives no adequate response and fails with the second error.





broken image