Topic: Domain Issues, Any help is greatly appreciated

[treydock]

Is there any definative way to get XP to connect to my SME domain without using the registry fix?  Editting my registry is a last resort for me, at least that's how my habit works.  If I have to use the fix I will unless any other way, Pls help

Also I have a Windows 98 box and a Windows 2000 box, how do you join those to an SME domain?

Any help is greatly appreciated, thank you.

[devlynd]

I can understand your hesitation to apply a registry merge, especially if you are unfamiliar with it.  However, in this case it is a requirement.  I have applied the merge numerous times and it works fine (XP machines.)  I think you will have nothing but frustration without the merge.

-Dev

[mdo]

If you use SME version 7 (which uses Samba version 3), the registry patch for Windows (XP) should not be required.
Michael

[treydock]

If the patch is not required (I do have SME 7) then what is causing

Note: This information is intended for a network administrator.  If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt.

An error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain ultimazero.serverhttp.com.

The error was: "No records found for given DNS query."
(error code 0x0000251D DNS_INFO_NO_RECORDS)

The query was for the SRV record for _ldap._tcp.dc._msdcs.ultimazero.serverhttp.com

For more information, click Help.



--------------------------------


I'm lost

[cactus]

If the patch is not required (I do have SME 7) then what is causing

Note: This information is intended for a network administrator.  If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt.

An error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain ultimazero.serverhttp.com.

The error was: "No records found for given DNS query."
(error code 0x0000251D DNS_INFO_NO_RECORDS)

The query was for the SRV record for _ldap._tcp.dc._msdcs.ultimazero.serverhttp.com

For more information, click Help.
(

Are you using SME Server to resolve computers in your local domain or are you using some external DNS? Normally when you add a computer to the domain mastered by the SME Server it should make an entry in the DNS. This messages seems to say that it cannot find an entry.

Is you SME Server member of the domain?

Are you able to ping the ip of your server?
Are you able to ping the hostname of your server?
Are you able to lookup the hostname on the server console using

Code: [Select]

nslookup server-name?

Did you clic on th ehelp button for more information?

Although you might seem hesitant about the registry merge, and it is stated that it might not be neccessary to do so, did you try it?

[treydock]

C:\>nslookup dualserver
Server:  dualserver.ultimazerosector.com
Address:  192.168.1.200

*** dualserver.ultimazerosector.com can't find dualserver: Non-existent domain


------------------


Was going to try and patch things myself but how the hell do you download the patches?  Are the links dead , cause I get "The requested URL could not be retrieved" for reg downloads.  Help pls :-/ , just one bump after another.  Still not sure what to dl to fix win2k and 98 machine either.

Also in process of searching how to join SME to domain but so far no luck.

[cactus]

C:\>nslookup dualserver
Server:  dualserver.ultimazerosector.com
Address:  192.168.1.200

*** dualserver.ultimazerosector.com can't find dualserver: Non-existent domain

Can you ping the ip-address of your you mentioned above from your client machine? If not there is something wrong with your netwrok connection to the server and it is not such a strange thing that you are unable to join the domain.

Was going to try and patch things myself but how the hell do you download the patches?  Are the links dead , cause I get "The requested URL could not be retrieved" for reg downloads.  Help pls :-/ , just one bump after another.  Still not sure what to dl to fix win2k and 98 machine either.

Also in process of searching how to join SME to domain but so far no luck.

Normally it would not be that hard, certainly not with the registry patch. I have added dozen of machines to SME Server by now.

Oh and please answer all the questions asked before, this will try solving your problem a little easier.

Is you SME Server member of the domain?
Are you able to ping the ip of your server?
Are you able to ping the hostname of your server?
Are you able to lookup the hostname on the server console using

Code: [Select]

nslookup server-name?
Did you click the help button?

[treydock]

Are you able to ping the ip of your server?

I was...now when I type ping into dos it closes the window...I think computers conspire to hate me.  But I confirmed they worked using server console (PuTTY)

Are you able to ping the hostname of your server?

Same as above

Are you able to lookup the hostname on the server console using

Code:
nslookup server-name
?

>nslookup
Default server: dualserver.ultimazerosector.com
Address: 192.168.1.200
>nslookup dualserver
***Can't find address for server dualserver: Non-existent domain

Don't know why I get that, that was in DOS, In the server console

# nslookup dualserver
Server:         192.168.1.200
Address:        192.168.1.200#53

Non-authoritative answer:
Name:   dualserver.ultimazerosector.com
Address: 192.168.1.200


>>What's #53?
PLEASE NOTE:
Could a router turned into a switch have anything to do with this?  I have a very new router that is very robust,  could that be a problem?

How does SME join it's own domain??

Still don't know which patch if any fix domain issue for OSes before XP.  I also did the XP Patch and it didn't fix a thing.

[treydock]

Went to join domain with some code I found in forum while searching and got the weirdest error

# net rpc join -D ultimazerosector.com -U admin
Password:
[2006/08/26 15:25:41, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(319)
  Error domain join verification (reused connection): NT_STATUS_ACCESS_DENIED

Please make sure that no computer account
named like this machine (DUALSERVER) exists in the domain
Unable to join domain CONDO.


CONDO was the very first domain I ever used and that was on my Win2k Server machine, and is now the workgroup name on my SME server.

[cactus]

Went to join domain with some code I found in forum while searching and got the weirdest error

# net rpc join -D ultimazerosector.com -U admin
Password:
[2006/08/26 15:25:41, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(319)
  Error domain join verification (reused connection): NT_STATUS_ACCESS_DENIED

Please make sure that no computer account
named like this machine (DUALSERVER) exists in the domain
Unable to join domain CONDO.


CONDO was the very first domain I ever used and that was on my Win2k Server machine, which has since been reformatted and now has only IIS and my printers on it.

Are you sure that your SME Server is configured to be Domain Controller and that the Windows server is not? Normally you should have access as admin (unless you made a type in the admin apssword, but I guess you checekd that already) although I have never joined a computer to the domain like this.

Can it be that the computer you are trying to add has been or still thinks it is in the domain from your old W2k server?
Did you take it out of the domain (placed in a workgroup) before reformatting your W2k box?

[mdo]

.....
Unable to join domain CONDO.

CONDO was the very first domain I ever used .... and is now the workgroup name on my SME server.

Then "CONDO" IS the name of your (Windows) domain that you want the Windows PCs to join (provided that you have enabled the SME server to be domain controller and that there are no conflicts on your network with another server acting as domain controller).

How does SME join it's own domain??

If SME is setup to be the (Windows) domain controller, then there is no such thing that it "joins it's own domain".

Michael

[treydock]

Thanks for the replies.  Also something I notced , when I use the command wbinfo -u to see users on domain it gives me an error
"Error looking up domain users", a clue?

cactus:
I'm positive I have things set correctly.  SME is set to be workgroup/domain controller.  The windows server only has IIS installed, I did not add any other services.  

mdo:
The SME server is only computer with anything capable of being a domain controller.  Also my SME server is set as the domain ultimazerosector.com, Condo is my workgroup name.  Which is why I'm so confused as to why it came up.

Also I could have sworn when I ran win2k server as a domain controller that I had to join it to it's own domain.  could be wrong , not the best memory.

thanks for the replies , back to smashin face on keyboard.

[mdo]

mdo:
The SME server is only computer with anything capable of being a domain controller.  Also my SME server is set as the domain ultimazerosector.com, Condo is my workgroup name.  Which is why I'm so confused as to why it came up.

I suggest you might want to read and learn more about the Microsoft Windows domain model and how it works. I tried to explain that your Windows PCs are joining the domain "Condo" (as you named the 'workgroup' = this IS your Windows domain) and the Windows domain name has nothing to do with your Internet domain name "ultimazerosector.com". These are 2 completely separate things.
Michael

[treydock]

I suggest you might want to read and learn more about the Microsoft Windows domain model and how it works. I tried to explain that your Windows PCs are joining the domain "Condo" (as you named the 'workgroup' = this IS your Windows domain) and the Windows domain name has nothing to do with your Internet domain name "ultimazerosector.com". These are 2 completely separate things.

My SME server's domain name is ultimazerosector.com, as well as my internet domain name.  So setting windows workgroup to Condo keeps me from being able to add them to a domain?  This is frustrating

Thanks for the help it gave me a few more ideas to try.  EDIT: tried a few things.  Tried deleting workgroup, SME wouldn't let me, not from the webbroweser or from console using db.  I would delete Condo from workgroup and then type in domain and still same error.  The error comes up fast too I don't get it.  I've done everything, i don't get it.  I think I'm going to reinstall and if that doesn't work then say goodbye to SME

[cactus]

My SME server's domain name is ultimazerosector.com, as well as my internet domain name.  So setting windows workgroup to Condo keeps me from being able to add them to a domain?  This is frustrating

Thanks for the help it gave me a few more ideas to try.  EDIT: tried a few things.  Tried deleting workgroup, SME wouldn't let me, not from the webbroweser or from console using db.  I would delete Condo from workgroup and then type in domain and still same error.  The error comes up fast too I don't get it.  I've done everything, i don't get it.  I think I'm going to reinstall and if that doesn't work then say goodbye to SME

I'm pretty sure the problem is not in the SME Server, you are the first on this forum to experience severe difficulties, a reinstall might help, but I'm not convinced.

I think the problem is either in you not understanding the way SME Server works or in your workstation as this has already been joined to a domain once. You still did not confirm if you took the workstation out of the domain.

Can it be that the computer you are trying to add has been or still thinks it is in the domain from your old W2k server?
Did you take it out of the domain (placed in a workgroup) before reformatting your W2k box?

I once more stress that it is vital to helping you that you answer all questions asked. They may seems islly to you, but most of the times we are trying to get some knowledge about your situation, you were there and witnessed everything, we weren't.

One advice: While it proves to be hard to add you workstation to the domain, you should refrain from modifing multiple things at once. First solve one problem, and when that is OK, make new modifications (like changing administrator and group settings), which could result in their own (new) errors. If you do all at once it is hard to help solve problems.