Topic: Domain Issues, Any help is greatly appreciated

[treydock]

Is there any definative way to get XP to connect to my SME domain without using the registry fix?  Editting my registry is a last resort for me, at least that's how my habit works.  If I have to use the fix I will unless any other way, Pls help

Also I have a Windows 98 box and a Windows 2000 box, how do you join those to an SME domain?

Any help is greatly appreciated, thank you.

[devlynd]

I can understand your hesitation to apply a registry merge, especially if you are unfamiliar with it.  However, in this case it is a requirement.  I have applied the merge numerous times and it works fine (XP machines.)  I think you will have nothing but frustration without the merge.

-Dev

[mdo]

If you use SME version 7 (which uses Samba version 3), the registry patch for Windows (XP) should not be required.
Michael

[treydock]

If the patch is not required (I do have SME 7) then what is causing

Note: This information is intended for a network administrator.  If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt.

An error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain ultimazero.serverhttp.com.

The error was: "No records found for given DNS query."
(error code 0x0000251D DNS_INFO_NO_RECORDS)

The query was for the SRV record for _ldap._tcp.dc._msdcs.ultimazero.serverhttp.com

For more information, click Help.



--------------------------------


I'm lost

[cactus]

If the patch is not required (I do have SME 7) then what is causing

Note: This information is intended for a network administrator.  If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt.

An error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain ultimazero.serverhttp.com.

The error was: "No records found for given DNS query."
(error code 0x0000251D DNS_INFO_NO_RECORDS)

The query was for the SRV record for _ldap._tcp.dc._msdcs.ultimazero.serverhttp.com

For more information, click Help.
(

Are you using SME Server to resolve computers in your local domain or are you using some external DNS? Normally when you add a computer to the domain mastered by the SME Server it should make an entry in the DNS. This messages seems to say that it cannot find an entry.

Is you SME Server member of the domain?

Are you able to ping the ip of your server?
Are you able to ping the hostname of your server?
Are you able to lookup the hostname on the server console using

Code: [Select]

nslookup server-name?

Did you clic on th ehelp button for more information?

Although you might seem hesitant about the registry merge, and it is stated that it might not be neccessary to do so, did you try it?

[treydock]

C:\>nslookup dualserver
Server:  dualserver.ultimazerosector.com
Address:  192.168.1.200

*** dualserver.ultimazerosector.com can't find dualserver: Non-existent domain


------------------


Was going to try and patch things myself but how the hell do you download the patches?  Are the links dead , cause I get "The requested URL could not be retrieved" for reg downloads.  Help pls :-/ , just one bump after another.  Still not sure what to dl to fix win2k and 98 machine either.

Also in process of searching how to join SME to domain but so far no luck.

[cactus]

C:\>nslookup dualserver
Server:  dualserver.ultimazerosector.com
Address:  192.168.1.200

*** dualserver.ultimazerosector.com can't find dualserver: Non-existent domain

Can you ping the ip-address of your you mentioned above from your client machine? If not there is something wrong with your netwrok connection to the server and it is not such a strange thing that you are unable to join the domain.

Was going to try and patch things myself but how the hell do you download the patches?  Are the links dead , cause I get "The requested URL could not be retrieved" for reg downloads.  Help pls :-/ , just one bump after another.  Still not sure what to dl to fix win2k and 98 machine either.

Also in process of searching how to join SME to domain but so far no luck.

Normally it would not be that hard, certainly not with the registry patch. I have added dozen of machines to SME Server by now.

Oh and please answer all the questions asked before, this will try solving your problem a little easier.

Is you SME Server member of the domain?
Are you able to ping the ip of your server?
Are you able to ping the hostname of your server?
Are you able to lookup the hostname on the server console using

Code: [Select]

nslookup server-name?
Did you click the help button?

[treydock]

Are you able to ping the ip of your server?

I was...now when I type ping into dos it closes the window...I think computers conspire to hate me.  But I confirmed they worked using server console (PuTTY)

Are you able to ping the hostname of your server?

Same as above

Are you able to lookup the hostname on the server console using

Code:
nslookup server-name
?

>nslookup
Default server: dualserver.ultimazerosector.com
Address: 192.168.1.200
>nslookup dualserver
***Can't find address for server dualserver: Non-existent domain

Don't know why I get that, that was in DOS, In the server console

# nslookup dualserver
Server:         192.168.1.200
Address:        192.168.1.200#53

Non-authoritative answer:
Name:   dualserver.ultimazerosector.com
Address: 192.168.1.200


>>What's #53?
PLEASE NOTE:
Could a router turned into a switch have anything to do with this?  I have a very new router that is very robust,  could that be a problem?

How does SME join it's own domain??

Still don't know which patch if any fix domain issue for OSes before XP.  I also did the XP Patch and it didn't fix a thing.

[treydock]

Went to join domain with some code I found in forum while searching and got the weirdest error

# net rpc join -D ultimazerosector.com -U admin
Password:
[2006/08/26 15:25:41, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(319)
  Error domain join verification (reused connection): NT_STATUS_ACCESS_DENIED

Please make sure that no computer account
named like this machine (DUALSERVER) exists in the domain
Unable to join domain CONDO.


CONDO was the very first domain I ever used and that was on my Win2k Server machine, and is now the workgroup name on my SME server.

[cactus]

Went to join domain with some code I found in forum while searching and got the weirdest error

# net rpc join -D ultimazerosector.com -U admin
Password:
[2006/08/26 15:25:41, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(319)
  Error domain join verification (reused connection): NT_STATUS_ACCESS_DENIED

Please make sure that no computer account
named like this machine (DUALSERVER) exists in the domain
Unable to join domain CONDO.


CONDO was the very first domain I ever used and that was on my Win2k Server machine, which has since been reformatted and now has only IIS and my printers on it.

Are you sure that your SME Server is configured to be Domain Controller and that the Windows server is not? Normally you should have access as admin (unless you made a type in the admin apssword, but I guess you checekd that already) although I have never joined a computer to the domain like this.

Can it be that the computer you are trying to add has been or still thinks it is in the domain from your old W2k server?
Did you take it out of the domain (placed in a workgroup) before reformatting your W2k box?

[mdo]

.....
Unable to join domain CONDO.

CONDO was the very first domain I ever used .... and is now the workgroup name on my SME server.

Then "CONDO" IS the name of your (Windows) domain that you want the Windows PCs to join (provided that you have enabled the SME server to be domain controller and that there are no conflicts on your network with another server acting as domain controller).

How does SME join it's own domain??

If SME is setup to be the (Windows) domain controller, then there is no such thing that it "joins it's own domain".

Michael

[treydock]

Thanks for the replies.  Also something I notced , when I use the command wbinfo -u to see users on domain it gives me an error
"Error looking up domain users", a clue?

cactus:
I'm positive I have things set correctly.  SME is set to be workgroup/domain controller.  The windows server only has IIS installed, I did not add any other services.  

mdo:
The SME server is only computer with anything capable of being a domain controller.  Also my SME server is set as the domain ultimazerosector.com, Condo is my workgroup name.  Which is why I'm so confused as to why it came up.

Also I could have sworn when I ran win2k server as a domain controller that I had to join it to it's own domain.  could be wrong , not the best memory.

thanks for the replies , back to smashin face on keyboard.

[mdo]

mdo:
The SME server is only computer with anything capable of being a domain controller.  Also my SME server is set as the domain ultimazerosector.com, Condo is my workgroup name.  Which is why I'm so confused as to why it came up.

I suggest you might want to read and learn more about the Microsoft Windows domain model and how it works. I tried to explain that your Windows PCs are joining the domain "Condo" (as you named the 'workgroup' = this IS your Windows domain) and the Windows domain name has nothing to do with your Internet domain name "ultimazerosector.com". These are 2 completely separate things.
Michael

[treydock]

I suggest you might want to read and learn more about the Microsoft Windows domain model and how it works. I tried to explain that your Windows PCs are joining the domain "Condo" (as you named the 'workgroup' = this IS your Windows domain) and the Windows domain name has nothing to do with your Internet domain name "ultimazerosector.com". These are 2 completely separate things.

My SME server's domain name is ultimazerosector.com, as well as my internet domain name.  So setting windows workgroup to Condo keeps me from being able to add them to a domain?  This is frustrating

Thanks for the help it gave me a few more ideas to try.  EDIT: tried a few things.  Tried deleting workgroup, SME wouldn't let me, not from the webbroweser or from console using db.  I would delete Condo from workgroup and then type in domain and still same error.  The error comes up fast too I don't get it.  I've done everything, i don't get it.  I think I'm going to reinstall and if that doesn't work then say goodbye to SME

[cactus]

My SME server's domain name is ultimazerosector.com, as well as my internet domain name.  So setting windows workgroup to Condo keeps me from being able to add them to a domain?  This is frustrating

Thanks for the help it gave me a few more ideas to try.  EDIT: tried a few things.  Tried deleting workgroup, SME wouldn't let me, not from the webbroweser or from console using db.  I would delete Condo from workgroup and then type in domain and still same error.  The error comes up fast too I don't get it.  I've done everything, i don't get it.  I think I'm going to reinstall and if that doesn't work then say goodbye to SME

I'm pretty sure the problem is not in the SME Server, you are the first on this forum to experience severe difficulties, a reinstall might help, but I'm not convinced.

I think the problem is either in you not understanding the way SME Server works or in your workstation as this has already been joined to a domain once. You still did not confirm if you took the workstation out of the domain.

Can it be that the computer you are trying to add has been or still thinks it is in the domain from your old W2k server?
Did you take it out of the domain (placed in a workgroup) before reformatting your W2k box?

I once more stress that it is vital to helping you that you answer all questions asked. They may seems islly to you, but most of the times we are trying to get some knowledge about your situation, you were there and witnessed everything, we weren't.

One advice: While it proves to be hard to add you workstation to the domain, you should refrain from modifing multiple things at once. First solve one problem, and when that is OK, make new modifications (like changing administrator and group settings), which could result in their own (new) errors. If you do all at once it is hard to help solve problems.

[treydock]

Currently All 5 computers that hosts to the SME server are in a workgroup but not a domain.  For instance....

Under Computer Name in My Computer's Properties it shows name of my computer....Domain is blank, workgroup is Condo.  Also when I was on my old domain I would ctrl alt delete to type in user / pw and choose local or domain login , now it's only local.  I hope that's what you needed by saying "took the workstation out of the domain".

It just seems so odd to me that a 3 WinXP, 1 Win2kServer and 1 Win98 computers ALL have same error.

--------------------

Note: This information is intended for a network administrator.  If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt.

The following error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain ultimazerosector.com:

The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)

The query was for the SRV record for _ldap._tcp.dc._msdcs.ultimazerosector.com

Common causes of this error include the following:

- The DNS SRV record is not registered in DNS.

- One or more of the following zones do not include delegation to its child zone:

ultimazerosector.com
com
. (the root zone)

For information about correcting this problem, click Help.



--------------

Also could a router with hardcoded firewall settings affect anything?

Action        Name                Source    Destination  Protocol  

 Allow        Ping WAN port     WAN,*     WAN,*      ICMP,*
 Deny        Default               *,*          LAN,*        *,*
 Allow        Default               LAN,*        *,*           *,*  
   



I hope this helps,  If there is any more info needed to help troubleshoot this let me know, I don't mind bumps in getting things working...always deal with that when I program and work with computers...but it's unbreakable walls that are most troublesome.

Thanks for help

[treydock]

Re-installed SME7.  Renamed my old Win2k domain server from it's name when it was the domain server, to maybe stop any confusion between computers...and still.  No connection to domains, same error.

Does anyone out there know what I should do?  I REALLY want to use SME but if I can't set up a simple domain my only alternative is win2k server

thanks

[cactus]

Re-installed SME7.  Renamed my old Win2k domain server from it's name when it was the domain server, to maybe stop any confusion between computers...and still.  No connection to domains, same error.

Does anyone out there know what I should do?  I REALLY want to use SME but if I can't set up a simple domain my only alternative is win2k server

thanks

The internal domain name does not neccesarrilly need to be the same as your external domain (suffix). Look in the server manager and see what is displayed for the windows workgroup setting (see Workgroup under Configuration). Although this seems to be the workgroup it really is the name of the domain you will have to enter when adding computers to the domain. Be sure to have the option Workgroup and Domain controller set to Yes.

When you add the domain be sure to use the admin user with your SME Server system password.

How about switching of the W2k server for a quick test to see if your W2k server really is not the domain controller?

Or else how about just for a test using a different domain name?

[treydock]

Ya I actually thought that, trying to use the workgroup name as my domain.  I didn't try it exactly as you meant but thanks for the idea definately going to give that one a shot.

Are users supposed to be allowed domains on their computers w/ their username/pw or does it always have to be admin?

Know what's odd?  I'd like to hear what yall think of this (I think netlogon.bat)  When I enter ultimazerosector.net as domain instantly the error pops up, when I type anything else it asks for a password and if it's wrong name just says wrong password and username.

Do I have to setup netlogon.bat to have machines join the SME domain?  If what code do I use?

And of course thanks once again I feel progress being made

[cactus]

Ya I actually thought that, trying to use the workgroup name as my domain.  I didn't try it exactly as you meant but thanks for the idea definately going to give that one a shot.

Please do so, as this should solve your problem. You will have to be a Domain Administrator to add computers to the domain, by default this is only the admin user. You can edit that, as you already read in the other thread(s).

When I enter ultimazerosector.net as domain instantly the error pops up, when I type anything else it asks for a password and if it's wrong name just says wrong password and username.

When you enter ultimazerosector.net as domain it almost immediately replies with an error because it cannot find this domain as it does not exist, there is no domain controller for this domain. The second proves to me that we are moving in the right direction, the domain controller exists, therefor it prompts you with the username and password screen as the current user is not known to the domain. Enter the correct credentials of a domain administrator (usually admin) with it's password and after a while it should prompt you that your computer has been added to the domain and you will have to reboot. (If not you may have to apply the earlier mentioned registry patch).

Are users supposed to be allowed domains on their computers w/ their username/pw or does it always have to be admin?

For a user to log in on the domain they will have to be domain member (Be known to the server, so an entry in the user list has to be made using the server panel). The only user that is by default avaiblable after you have joined the domain after a default setup is the admin user for your domain.

Know what's odd?  I'd like to hear what yall think of this (I think netlogon.bat)  [cut]

Do I have to setup netlogon.bat to have machines join the SME domain?  If what code do I use?

The netlogon file is a file that is ran for every user after they logon to your domain. In this file you can configure default drive mappings, synchronize the time with the server etcetera.

You know what I think? I think you need to read up on how domains work and what their normal stucture is... as I get the idea that the probloem all seems to point to a lack of knowledge. Sorry it sounds a bit harsh... but it will surely be of help in the future.

And of course thanks once again I feel progress being made

Slowly it seems to me we are getting there...

[treydock]

HUZZAH ! got my main computer on the domain.  Just named workgroup condo.local and joined that domain.  As for adding members to groups I am not sure how effective that is.  Since SME is a domain controller but what about something like active directory?  What is the purpose in having user's with different Window's groups?

And ya I am going to read up on domains, but one last question...well probably not last but I hope

1 XP , on domain , 1 Win98 on domain ... 2nd WinXP gives me an error...

"Multiple connections to a server or shared resources by the same user, using more than one user name, are not allowed.  Disconnect all previous connections to the server or shared resources and try again. "

What I don't get is my main computer has like 7 shared folders and it worked...

Did the registry fix, can't think of much else to do it...I log into the laptop with a unique username.

[mmccarn]

A few notes / comments:

1. domain:  Microsoft intentionally mis-used the term "domain" to refer to their local network workgroup when NT came out (in the mid 90's), specifically in order to generate the sort of confusion that we've seen in this conversation.  At the time, Microsoft  was claiming that "MSN" would replace the Internet within a few months or years...  That project failed, but the confusion remains!  Active Directory either helps or hurts (based on your local DNS configuration) by trying to auto-magically map a netbios "domain" name to a DNS domain name - a great idea unless you use a "real" domain name locally, requiring lots of hoop-jumping to keep both your local network and your public network running smoothly, or if any of your workstations or servers don't point to your domain controller for DNS...

2. Multiple connections: When joining a windows domain, you cannot have any open shares connected to the domain controller with a user name that is different from the one you use to "join the domain", or you get the error about "Multiple connections to a server or shared resources by the same user, using more than one user name".  

Specifically, if you map a network share as user A, then try to join the domain specifying user B during the join process, you get the above message.

To get around this issue

- open a command prompt on the Windows system and issue the command "

net use * /d" to disconnect all open shares or
- disconnect all open shares one-by-one from "My Computer" (note: this may leave an open share to \\server\rpc$ that you would still have to close using "net use * /d") or
- change the credentials used for these shares to "admin" or
- add "user A" to the "Domain Admins" group, then use "user A" when prompted during the "join" process or
- Create a new local user account on the workstation (with Administrator rights!), login using that new local account (so that your mapped drives are *not* reconnected), and join the domain from there.[/list]
(Note: the first (hilighted) use of the word "user" in the microsoft error message above really means "computer", while the second use really means "user".  There's nothing like re-defining words at random for generating confusion!)

3. Registry Patch: The Windows XP Registry patch only changes one registry value.  You can un-do the patch by changing [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\parameters\RequireSignOrSeal from 0 (zero) back to 1 (one), or by saving the reg patch as a local file named <something>.reg, changing "dword:00000000" at the end to "dword:00000001", then double-clicking on it.

[treydock]

Ah thanks for the info mmccarn, leave it to windows to confuse the already confused :-/.  I ran a domain controller from windows and didn't have much problem but then again I was only using it for local network not public or anything.

NOTE: Tried the net use */d and it says "The network name cannot be found."
I tried many variants of the net command , none seemed to work or do what I was looking to do.  The only shares I could find were Windows , C , IPC

Is there any explanation as to why my main XP machine could join the domain with all sorts of shares and the other machine won't?  I am pretty sure I used admin to join this machine and I've tried using 3 dif log ins to get onto the domain on other machine , all domain admins.

Also I was noticing...well I've known this for some time and it's how my work network is setup.  When you login as local machine say as userA your folder with settings and what not is userA but if you log into domain as userA it's userA.domain for the folder....i've been using my computer about 1 year before the domain, how do i get all my local machine settings / data / everything to work as the domain user with same login name?

[cactus]

HUZZAH ! got my main computer on the domain. Just named workgroup condo.local and joined that domain.

Congratulations

As for adding members to groups I am not sure how effective that is. Since SME is a domain controller but what about something like active directory?

Adding memebers to groups is very effective as the domain controller (SME Server) uses this groups to provide access to its shares, but can als protect local shares using domain groups as you can easily add security items to the shared folder using those groups, provided that the PC hosting the share is joined to the domain. However if you have a server I would advice you to host all data there. It makes backi up easier and also saves you from having an other computer up 24/7 etc.

These groups (and the users as well) can be used in the same fashion as for setting directory/share permissions as for users and groups on a Windows based domain controller. AD however is a whole different story, this is a M$ feature and the best thing close to it is an LDAP directory, which SME Server has... BUT... SME Server does not use this like the AD to assign premissions and store (all) user data. It uses pnly a small part of it features to host your address boook which automatically stores local e-mailaddresses of users known on the domain.

Is there any explanation as to why my main XP machine could join the domain with all sorts of shares and the other machine won't? I am pretty sure I used admin to join this machine and I've tried using 3 dif log ins to get onto the domain on other machine , all domain admins.

Has this PC been removed from you old domain and is it placed in a workgroup at this moment? If not see to it that it is placed in a workgroup instead of a domain and then try again... maybe that migh help.

Also I was noticing...well I've known this for some time and it's how my work network is setup.  When you login as local machine say as userA your folder with settings and what not is userA but if you log into domain as userA it's userA.domain for the folder....i've been using my computer about 1 year before the domain, how do i get all my local machine settings / data / everything to work as the domain user with same login name?

This is notmal windows beahviour.

Log in as local administrator and first make a backup of both directories. After that you can try one of the following:
- delete user.domain directory and rename user to user.domain directory
- copy all user files over the user.domain files.
After that log out and log back in as user at the domain.

As this is not tested I urge you to make a backup of both before starting to copy or delete.

[treydock]

cactus :

Thanks for the reply as usual

The computer not joining a domain is on a workgroup , no domain.

I'm trying to read up on what a domain (like network domain and what not) is but my searches mostly get domain registration....what's a good keyword to search for?  I'm trying to find good explanation of a domain network and features at my dispossal...going to start a new thread about my hardware situation, came into extra computers, want to know how to best utilize them.

Thanks again

[smeghead]

NOTE: Tried the net use */d and it says "The network name cannot be found."

try net use * /d or net use * /delete

note the space between the * & the /

Might pay to just try net use on its own and see whats reported first.

[mmccarn]

what's a good keyword to search for?

You could start with "Active Directory", or "Active Directory wiki".

[treydock]

try net use * /d or net use * /delete

note the space between the * & the /

Might pay to just try net use on its own and see whats reported first.

first used net use * /delete , got "There are no entries in the list"

then did net use " New Connections will be remembered.  There are no entries in the list."

Do I have to run this command from a specific folder or C:> ?

[mmccarn]

net use * /delete , got "There are no entries in the list"

net use "New Connections will be remembered. There are no entries in the list."

Both of these indicate no active connections, so you should be able to join the domain.  ("net use" will list active connections if there are any; "net use * /delete" will delete all active connections if there are any).

You *should* be able to join this PC to the domain; if you're still getting the error about "Multiple connections..." then there's something else going on.

[treydock]

Ya still getting that error...could it be that my laptop and desktop share the same Win XP liscence?  It's frustrating....got domain access working then 1 computer won't join

Oh and for some reason I can't rename my webserver that's Win2kServer...it asks for user/pw and I have tried SME's admin and root , tried local computers administrator and no luck , tried normal user accounts and what not.

[mmccarn]

I would not expect duplicate licenses to be a problem.  Duplicate names, maybe, but I'd expect that to cause other problems, too...

Is one machine still in another domain?  If so, move it to a workgroup (ignoring the errors that pop up), reboot, then try adding it to the domain again.

Is one system configured to use DHCP while the other is using hard-coded IP information?  

Is the Win2K box still an Active Directory Controller?  If so, you'll have to use "dcpromo" to "demote" it from being an AD controller back to being a "member server".  Windows 2000 AD Controllers cannot be renamed: http://support.microsoft.com/default.aspx?scid=kb;en-us;296592

[treydock]

mmccarn:

My Win2k IIS server is setup as a static non DHCP server because it has multiple sites so I had to give it multiple IPs...could that be it?

[mmccarn]

No, static IPs should not be a problem.

Being an Active Directory Controller would be a problem.

"Start", "Run", "dcpromo" <Enter> - does it offer to "promote" your system, or does it tell you you're already a domain controller?

[treydock]

mmccarn:


Ya i did the dcpromo command and it offered to be new domain controller or a new domain controller in an existing domain...

Here are a few things I THINK might be it.

I renamed Laptop's usrname to Root (i always misspell Administrator...) , conflict with SME's root?

Um the laptop has no more shared folders that I can tell

It connects to network via a wireless router that is turned into a wireless accesspoint that is attached to networks switch..

user name is unique

after re-installing SME i haven't entered in all the hosts but should that matter?

thats all I can think of, if there is any info that would help I'll answer them,

Thanks for help

[fmilano]

I had a similar issue with a DNS error when trying to join a Windows XP computer to a domain on SME. After uninstalling Norton Internet Security and turning the Windows Firewall off, the XP computer joined the domain no problem.

System is a SME 7 to 7.3 upgrade

Hope this might help