Network location cannot be reached when attempting to join domain

[mocolicious]

I just made a custom Windows 7 computer image for my company with all the bells and whistles that I've learned from this site and the Microsoft security forums. However, I went to join it to the domain and I get the following message:

"the following error occured when attempting to join the domain.....; the network location cannot be reached"

-I am trying to add it to a server 2k3 domain
-I can ping IP and FQDN of DC
-can add other windows 7 machines to domain
-can add XP machines with similar security settings

I firmly believe that it is a registry edit I have made or a gpedit that I made, I'm just really not sure which one and it seems like I tried changing all the major ones back as a troubleshooting step.

I really don't know what to try next

 

[chev65]

This sometimes requires that you change the lanman server parimeters in order to get Windows 7 working with older servers. Do these adjustments on the Windows 7 machines that need to connect to the server. The default settings can be different depending which version of Windows 7 is being used.

Control Panel - Administrative Tools - Local Security Policy

Local Policies - Security Options

Network security: LAN Manager authentication level
Set to Send LM & NTLM responses only

Set the Minimum session security for NTLM SSP
Disable Require 128-bit encryption

 

[mocolicious]

I set LAN Manager authentication level to "Send LM & NTLM responses" and unchecked the box requiring 128bit encryption. Still no go

 

[kegobeer]

Can you explain how you made the custom image and what you included and excluded from that image?

 

[mocolicious]

I took an earlier image that I made using various different tricks from this site, and I applied the DISA STIGs to it in an attempt to make it more secure. The only reason why I don't just go back to the old one was the my external HDD that I had the image on died after I imaged it. So this is pretty much all I have and it took a month of work to get it here

 

[chev65]

It can also help to type in a static DNS into the IPv4 properties window using the same DNS address as the server is using.

 

[mocolicious]

I tried staticly assigning ip, DNS, adding the computer object in AD, adding the DNS suffix in the computer name.