Re: Unable to join client to domain

Hi Rob,

Thank you for posting here.

From your description, I understand that you cannot join your XP client
computer into domain and receive error "access is denied". If I am off
base, please don't hesitate to let me know.

First, I really appreciate for your effort on this issue. Base on my
experience, many factors can lead to this issue. Let's try the following
steps.

I. Change the logon account and reset security settings.

1. Logon to the workstation with the local Administrator user account.

2. Reset security settings back to the defaults on this workstation by
referring to the following MS KB article:

313222 How To Reset Security Settings Back to the Defaults
http://support.microsoft.com/?id=313222

3. Make sure that the user account which you used to join the workstation
into domain has enough permissions to do so. Try to use a domain admin
account to join the workstation to see if problem still exists.

II. Following the article below to see if issue persists:

Error Message "Access Denied" When You Join a Computer to a Domain
http://support.microsoft.com/?id=330095

III. Try Clean Boot to isolate the third-party application.

1. Click Start->Run...->type msconfig and press Enter
2. Click Services tab and select Hide All Microsoft Services and Disable
All third party Services.
3. Click Startup tab and Disable All startup items
4. Click OK and choose Restart
5. After reboot, check whether the problem still occurs
6. If there are no more problems, please use the above steps to enable
services and startup items one by one in order to figure out the root cause
of this issue.

If it is caused by third-party applications, please uninstall them to see
if issue persists.

IV. Disable the SMB signing on the XP client computer by clicking Start ->
Run, type Regedit and click OK. Then set the following key based on the
value I provdied:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters
Value name: enablesecuritysignature
Data type: REG_DWORD
Value data: 0

Value name: requiresecuritysignature
Data type: REG_DWORD
Value data: 0

In the subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\param
eters
Value name: enablesecuritysignature
Data type: REG_DWORD
Value data: 0

Value name: requiresecuritysignature
Data type: REG_DWORD
Value data: 0

If problem persists, please gather the following information:

1. How was the Windows XP workstation installed? Was it clean installed
from a Windows XP CD?

2. What user account were you using to join the Windows XP workstation into
the domain?

3. Please give me the SBSNetSetup.log file from the problematic
workstation, the location is: C:\Program Files\Microsoft Windows Small
Business Server\Clients\SBSNetSetup.log

3. Download and run the network MPS report tool On the SBS 2003 server

a. Visit
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE to download the file.

b. Run the MPSRPT_NETWORK.EXE on the server box.

c. Wait for 10~15 minutes.

d. Open Windows explorer, navigate to
%systemroot%\MPSReports\Network\Reports\Cab

e. Send the .cab file directly to me at v-innjin@xxxxxxxxxxxxx

I appreciate your time. I am happy to be of assistance to you and look
forward to your reply.

Have a nice day!

Best regards,

Inn Jin (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • RE: Unable to send any fax only from workstation
    ... Please also ensure you have installed the hotfix 884032 on the SBS server ... Windows XP SP2. ... Microsoft CSS Online Newsgroup Support ... From the filemon and regmon from the workstation, ...
    (microsoft.public.windows.server.sbs)
  • RE: NT4 Critical Updates
    ... extended support for Windows NT Workstation 4.0 ... However, based on feedback from customers, Microsoft ...
    (microsoft.public.security)
  • Re: odjnk.exe crashing a new Dell Optiplex GX270 windows xp workst
    ... Earlier, several new complications developed, but beforehands, I'd like to note that the workstation is up to date on Microsoft Update and Symantec Norton AntiVirus Virus Definition as of 06/15/04. ... We also tried deleting the whole Windows Messenger Folder while not in safe mode, but it says that the application is being used even though it is not initialized. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Clients not able to login to Domain
    ... I'm using the Novell Netware Client for Windows v4.91. ... Windows network or just my workstation. ... > Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: How can I type this value in?
    ... Microsoft Certified Professional ... Microsoft MVP [Windows] ... "Joe Livingston" wrote: ... | Data Type: ...
    (microsoft.public.win2000.registry)
Loading