Domain Join issue

[Ejrapurado]

Hey Guys,

Im a bit of a noob with Windows 7 and am currently fumbling my way through the OS.

We are in the process of deploying Windows 7 to our domain. At the moment we have a Windows Server 2003 native domain but currently have Windows Server 2008 R2 Domain Controllers.

We are having an issue at the moment with joining Windows 7 machines to the domain. They are joining fine (according to the PC) however, their computer accounts are not showing up in AD.

Initially i thought it was an issue with replication as we have many domain controllers across our sites. However, after waiting for about 3 days (i know replication doesnt take this long but i was hoping...) the computer accounts still did not appear.

Has anyone seen this issue before and or heard about this happening?

Any help or a solution would be great.

Thanks guys.

Ed.

 

[mckillwashere]

have you checked under all of the computer bins???
I am running my ad on 2008 and it used to be based off a 2008r2 machine but I wanted to play with IIS 7.5 so I changed roles of reach machine. I have not had any problems regarding pcs not showing up.

*if i hadnt just locked myself out of my new firewall system I would jump onto the vpn and check things out and see if I could find out why you are having that problem in setting...*

 

[Ejrapurado]

Doing a search through AD for Computer accounts doesnt find it. Do i need to be looking through all of the bins?

 

[mckillwashere]

from the actual machine there s a way to see what container you are in... I just forget how.

 

[Ejrapurado]

Also adding to the first post. I have tested the domain join with a Windows XP machine and it is fine. Once the machine has joined, the computer account is there.

 

[mckillwashere]

Do the machines show up in dns on the ad machine??

 

[WindowsStar]

Hey Guys,

Im a bit of a noob with Windows 7 and am currently fumbling my way through the OS.

We are in the process of deploying Windows 7 to our domain. At the moment we have a Windows Server 2003 native domain but currently have Windows Server 2008 R2 Domain Controllers.

We are having an issue at the moment with joining Windows 7 machines to the domain. They are joining fine (according to the PC) however, their computer accounts are not showing up in AD.

Initially i thought it was an issue with replication as we have many domain controllers across our sites. However, after waiting for about 3 days (i know replication doesnt take this long but i was hoping...) the computer accounts still did not appear.

Has anyone seen this issue before and or heard about this happening?

Any help or a solution would be great.

Thanks guys.

Ed.

When you are on the DC search for the computer by searching the entire AD. Maybe your DC is putting the computer in some other place.

What happens to the Windows 7 machine if you reboot it 4 or 5 times are you allowed to log into the domain on the Windows 7 machine? Can you log in with some other domain account? I just want to make sure the Windows 7 machine is REALLY on the domain.

 

[Ejrapurado]

No they don't.

 

[Ejrapurado]

Hey Guys,

Im a bit of a noob with Windows 7 and am currently fumbling my way through the OS.

We are in the process of deploying Windows 7 to our domain. At the moment we have a Windows Server 2003 native domain but currently have Windows Server 2008 R2 Domain Controllers.

We are having an issue at the moment with joining Windows 7 machines to the domain. They are joining fine (according to the PC) however, their computer accounts are not showing up in AD.

Initially i thought it was an issue with replication as we have many domain controllers across our sites. However, after waiting for about 3 days (i know replication doesnt take this long but i was hoping...) the computer accounts still did not appear.

Has anyone seen this issue before and or heard about this happening?

Any help or a solution would be great.

Thanks guys.

Ed.

When you are on the DC search for the computer by searching the entire AD. Maybe your DC is putting the computer in some other place.

What happens to the Windows 7 machine if you reboot it 4 or 5 times are you allowed to log into the domain on the Windows 7 machine? Can you log in with some other domain account? I just want to make sure the Windows 7 machine is REALLY on the domain.

I have actually done the search under the entire domain and it still cannot find it. I do find an issue when i reboot say 2 or 3 times. It gives me 2 different types of errors. First one is the "trust relationship" error and the 2nd one is "The security database on the server does not have a computer account for this workstation trust relationship"....

This looks to me that the issue is with creating the computer account... I have tried renaming this PC and then re-joining it to no avail. I have also tried other Win 7 machines with the same result. Win XP machines can join without any issues...

 

[WindowsStar]

I have actually done the search under the entire domain and it still cannot find it. I do find an issue when i reboot say 2 or 3 times. It gives me 2 different types of errors. First one is the "trust relationship" error and the 2nd one is "The security database on the server does not have a computer account for this workstation trust relationship"....

This means the Windows 7 machine never added to the domain.

Something to try: Make sure your DATE/TIME and TIME ZONE on the Windows 7 machine is exactly the same as the DC before you add the machine to the domain.

Let us know.

 

[mckillwashere]

Thank you WindowsStar

 

[WindowsStar]

Thank you WindowsStar

Your Welcome??? Did this resolve the OP issue?

 

[mckillwashere]

Not sure,
I was saying thank you since it was an issue I was helping blindly with since it was a problem I have never encountered before.

 

[WindowsStar]

Not sure,
I was saying thank you since it was an issue I was helping blindly with since it was a problem I have never encountered before.

Thanks for the Thanks! I did not know if that fixed it and the OP PMed you or you knew it worked. Thanks for letting me know.

I guess we will need to wait for the OP.

 

[Ejrapurado]

Hey guys,

Sorry for the delay in getting back to you guys. It seems that the domain join is now working and it was the time. It is now working with Windows 7 and Windows XP. This wasn't the initial issue just thought that it would have something to do with it.

i'll give you guys a heads up of whats going on and what we are trying to do.

Our Environment
1. We are running a Windows Server 2003 native domain
2. All our DC's are running Windows Server 2008
3. All our DC's are spread across our sites connected with site to site VPN's with a few DC's here in Head Office.

What we are trying to achieve.
1. We are currently running Windows XP machines with our standard naming convention.
2. We want to roll out Win 7 accross our network using the same naming convention (which means computer accounts will already be in AD)

So far i have managed to get an image sorted out by sysprepping a machine then using ghost to capture an image, however we need to include some sort of auto domain join.

Now the problems i'm facing are as follows:

1. If i use the unattend join within the specialize pass of the sysprep answer file, it will join it (according to the machine itself), however, it will not create a computer account. If there is already a computer account, it will do nothing to it, yet the machine is saying that the PC is joined to the domain.

2. I have tried this process with powershell, netdom as well as using VB script to delete the account but this still does not work.


My question is, how do you guys go about doing a process like this? Am i missing something?

If you require more info, please let me know.

Thanks.

Ed.

 

[WindowsStar]

Let me simplify the problem and see if I get it right.

In a nutshell:

You want to image a Windows XP machine (FINANCE1) to Windows 7 keeping the AD name as (FINANCE1).

Correct?

 

[Ejrapurado]

Correct.

 

[WindowsStar]

Are you doing this REMOTELY or will you be at the machine??

 

[Ejrapurado]

Will be on the machine.

 

[WindowsStar]

This is simple; we have done this hundreds of times, I have done about 100 so far in our deployment.

Step 1: Remove the XP machine from the domain. (Note the name: FINANCE1)
Step 2: Ghost Image the machine
Step 3: Boot the machine, let it discover the hardware, etc. etc.
Step 4: Activate Windows 7 to your KMS server.
Step 5: Rename machine to OLD XP machine name FINANCE1.
Step 6: Add machine to the domain.

Done!