Error when joining domain

[frasersales]

I'm trying to join a domain on Windows 7 and I receive the below error message. I'm testing with 2 computers on the network. The other computer is a server with Windows Server 2008 and DNS installed. I set the DNS on Windows 7 to the server's IP address. Installed domain controller using the frasersales.com domain. After restarting the server the computer logins into the domain. The A record for frasersales.com is also pointing to a website. Not sure if this will affect it. Pinging the domain controller works. I was reading on the web that after installing the DC there should be SRV records in the DNS managers domain name folder. Looks like these are missing. Is it possible to manually add them?

Any help would be appreciated


Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\Windows\debug\dcdiag.txt.
The following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "frasersales.com":
The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)
The query was for the SRV record for _ldap._tcp.dc._msdcs.frasersales.com
Common causes of this error include the following:
- The DNS SRV records required to locate a AD DC for the domain are not registered in DNS. These records are registered with a DNS server automatically when a AD DC is added to a domain. They are updated by the AD DC at set intervals. This computer is configured to use DNS servers with the following IP addresses:
87.194.255.154
192.168.0.3
- One or more of the following zones do not include delegation to its child zone:
frasersales.com
com
. (the root zone)

 

[2xg]

Welcome to SF,

Is this the Server's Primary DNS - 192.168.0.3? 87.194.255.154 - Secondary?

DNS Forwarders need to be added/configured from the Server's DNS Management.

Client Computers shd be on DHCP and pointing to the 192.168.0.3 DNS Server.

 

[frasersales]

The Primary DNS is 192.168.0.3 although I removed the public DNS. The DNS Forwarders have been set using the Server's DNS Management. Changed the client PC to DHCP but it's still not working.

 

[2xg]

Is this the first Windows 7 computer that you're trying to connect to your Domain?
Have you also change it back to Workgroup then try re-joining it to your domain?

I'm trying to join a domain on Windows 7 and I receive the below error message

Also, please check your Server's Event Viewer logs, and post the Event ID's for any errors.

 

[frasersales]

The Windows 7 has always been set to workgroup. I've tried to add another server with Windows Server 2008 to the domain and the same error happend. I noted the exact time as changing the domain and the only events I noticed is the Audit Success in the Event Viewer's security folder. The firewalls have been temporary disabled on both computers while testing this.

 

[2xg]

Pls double check your DNS Management config. Seems to be DNS misconfiguration.
You may snap shots and post here so that we may take a look at the config with your permission of course.

2 days ago, I was doing a Lab in my home network using Win08Serv R2 and I tried to dup your issue, mine came out with a diff DNS error and I was able to resolved it.

If it's possible please post an ipconfig /all of your Server and an ipconfig /all of the problematic computer that you're trying to join to the domain?

 

[brady]

Are you trying to join to the "Freesales.com" or "Freesales.local".
If your A Record points to an external site, you need to join the .local

 

[frasersales]

The frasersales.com domain is pointing to a website. How do I make a .local domain on the server?

http://www.frasersales.com/dns_management.jpg


Server
------
Windows IP Configuration
Host Name . . . . . . . . . . . . : Server
Primary Dns Suffix . . . . . . . : frasersales.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : frasersales.com

Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-23-7D-DC-59-6C
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::e473:69bf:542:fe8b%10(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.0.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCPv6 IAID . . . . . . . . . . . : 251667325
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-E9-66-24-C6-00-23-7D-DC-59-6C
DNS Servers . . . . . . . . . . . : ::1
192.168.0.3
Primary WINS Server . . . . . . . : 188.220.37.137
NetBIOS over Tcpip. . . . . . . . : Enabled


Client
-----
Windows IP Configuration
Host Name . . . . . . . . . . . . : Fraser-PC
Primary Dns Suffix . . . . . . . : frasersales.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : frasersales.com

Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8168D/8111D Family PCI-E Gigab
it Ethernet NIC (NDIS 6.20)
Physical Address. . . . . . . . . : 00-19-66-FB-3F-63
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.0.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 26 April 2011 10:42:24
Lease Expires . . . . . . . . . . : 27 April 2011 10:42:25
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.3
Primary WINS Server . . . . . . . : 192.168.0.3
NetBIOS over Tcpip. . . . . . . . : Enabled

 

[frasersales]

I renamed the domain to a .local name and created a zone and A record pointing to this. Still have the same error. Can yous think of anything else? Maybe I'm not setting the Active Directory properly.

 

[2xg]

Hello,

Sorry for the very late reply, extremely busy.

Did also you create an A Record to point to 127.0.0.1 from your DNS Management Console, that shd resolve the .local domain name?

Also, what's the Domain functional level set in your Server?

What's the versions of the Windows 7 that you're trying to connect to your Domain?

You may try this on one of the Win7 computers:
Click on Start and type Local and open the Local Security Policy Manager.

Locate Local Policies => Security Options, in the right find Network Security: LAN Manager Authentication Level, and set to Send LM & NTLM - use NTLMv2 session security if negotiated.
Now, try connecting the win7 computer to your domain.

Please post your progress.

 

[brady]

If frasersales.com is a public website, you don't need an A record internally to see the website. that most likely if your problem... If you remove the A record on the DNS server to frasersales.com then ipconfig /flushdns you should be able to join domain.

2nd note: Your DHCP and DNS services are running on 2 different servers?

3rd note: Disable WINS service as well.

 

[2xg]

Might be worth it to reconfigure your DNS Server and start all over again. I don't know you have already done this.

Make sure that the Windows 7 computers that you are using are fully activated(Windows Product key), for sure they won't be able to connect to your Server.
To verify, click on Start and type system, from the search results select System under Control Panel.

 

[frasersales]

Domain functional level is set to Windows Server 2008. The OS is Windows 7 Pro 64 bit although I'm having the same error when using another server with Windows Server 2008 as the clent computer.

In the frasersales.local zone, I've added an A Record pointing to 127.0.0.1 and another A record pointing to the WAN IP. Do I need both or should it only be the 127.0.0.1?

Do I need SRV records in DNS Management because there's none there?

Maybe the reason why the DHCP is on a different server than the DNS is because the client computer has DHCP enabled and the server has DHCP disabled. Should the DHCP and DNS be on the server?

 

[brady]

in 2008, DHCP & DNS are 'roles'.
Not sure why you would need an A record pointing to local loop address, I've never seen that used before.
WAN ip address? Are you talking about a remote site? or your public IP address?

There should only be 1 DHCP role in a small'ish, 1 subnet LAN. DHCP and DNS roles should be played by the same 2008 server.