Unable to join domain

What OS does the domain server have?

It's a zimbra server running OpenLDAP on centos 5.

Have you disabled Home networking in win7?

Nope, I dunno how to...

Also checked the properties "Control Panel\All Control Panel Items\Network and Sharing Center\Advanced sharing"
settings like "network discovery", "allow windows...." instead of "use useraccount to connect....."

Network Discovery is on, and HomeGroup connections "allow Windows..." is checked on.

Is the computer wired or wireless?

wired.

Have you done any tweaks or hacks to services, any services disabled?
(particularly TCP/IP net bios ... service)

Not that I know of...everything is still default...

What policies have you set on your domainserver regarding login security, password encryption?

zimbra's openldap uses posix and samba.

I'm wondering if an update to Win7RC may solve the problem...? Downloading it now....

fredjonze said:

I'm also having problems joining a domain with Win7 RTM...

Your computer could not be joined to the domain because the following error has occurred: No mapping between account names and security IDs was done.
or this error:
The join operation was not successful. This could be because an existing computer account having the name xxxx was previously created using a different set of credentials. Access is denied.

Did the administrator delete the machine account as well?
the machine account logs the machine ID in active directory.

The user account is tied to the machine account.
So deleting only the user account is not sufficient.

the only way to solve this is to make sure the affected computer is physically disconnected from the network.

then the admin deletes both the user and the machine account.

Then it has to work.

good luck


EDIT: The user profile also has to be deleted. (after data has been backed up)

nodoze

Win 7 can either make a homegroup (for home networking) or set up a "work" network connection. If you are in homegroup on win 7 it will give you grief
Ken

I'm in the Work Network.

1. Ran NSLOOKUP to verify I can see the domain controller - Yes I can.
2. Manually entered the DC IP number in DNS - Yes I have.
3. Disable IPv6 - Yes, disabled
4. Enabled netbios over TCP - Yes, enabled.
5. Can successfully ping both DCs - Yes, can ping both.
6. Disabled all firewalls - no firewalls enabled.
7. Tweaked secpol.msc settings as described in other posts - yes, tweaked everything.

NoDoze said:

I'm in the Work Network.

1. Ran NSLOOKUP to verify I can see the domain controller - Yes I can.
2. Manually entered the DC IP number in DNS - Yes I have.
3. Disable IPv6 - Yes, disabled
4. Enabled netbios over TCP - Yes, enabled.
5. Can successfully ping both DCs - Yes, can ping both.
6. Disabled all firewalls - no firewalls enabled.
7. Tweaked secpol.msc settings as described in other posts - yes, tweaked everything.

Thanks NoDoze,

In one previous post you wrote

and HomeGroup connections "allow Windows..." is checked on.

It needs to be on "use user accounts and password......"

Not that this alone will fix it, but it's one of the possibly several settings blocking the access.

Sadly I don't know any thing about samba servers, so if maybe my next questions are ignorant, forgive me.

On windows domains you need to make machine accounts, not only user accounts and userprofiles.

How does that work on your server? Do you have to make a machine account? And did you make one? did you delete it before connecting the win7 client to the server?

Did you flush the dns cache on both the server and the client?

On the client it's ipconfig /flushdns (in command prompt)

I'm sorry if I can't be more helpful to you. I only have the knowledge of Windows servers.

Good luck

Made the changes you mentioned....
I flushed the DNS and made the change u mentioned above....

The way the zimbra server is setup, when the user logs into the domain the first time, the PC is authorized and added to the DC. So far, since I haven't been able to connect with the Win7 PC, the PC still isn't authorized with the DC.

same error...

Hopefully the update to RC does the trick! heh....

NoDoze said:

Made the changes you mentioned....

The way the zimbra server is setup, when the user logs into the domain the first time, the PC is authorized and added to the DC. So far, since I haven't been able to connect with the Win7 PC, the PC still isn't authorized with the DC.

And there are no traces of the previous install still on the server?

On a windows server you have to erase user account, machine account and user profile.

On the Win7 machine go through the services to see if some service to do with domain is stopped.

Also in the policies of the win7 computer there might be some setting about how authentication is checked when login on to a domain.
Maybe there is a discrepancy there.

Like I said in my first post, this is complicated stuff because it can be a culmination of factors.

Sorry if this doesn't help.

greetz

Update:
I took the laptop to a domain admin and he was able to join the computer to the domain. It appears that even though I have rights to join to a domain, in XP, that doesn't mean it will work in Win7. Is there another permission that needs to be granted for a non-domain admin to be able to join to a domain?
Thx

NoDoze said:

LOL I AM THE DOMAIN ADMINISTRATOR! ROFLOL

It would help to explain what "all the variables" means...

XP and linux PCs all connect fine....it's something different in Windows 7...but what could it be???

You are the Domain admin right

fredjonze said:

Update:
I took the laptop to a domain admin and he was able to join the computer to the domain. It appears that even though I have rights to join to a domain, in XP, that doesn't mean it will work in Win7. Is there another permission that needs to be granted for a non-domain admin to be able to join to a domain?
Thx

You took this to a domain admin?? different domain? he was able to join it. whats different abt his setup from yours?

Ken