Using NETDOM.EXE to add Windows Vista to domain...

[Paul Yhonquea]

Hello all,


Is there anything special that needs to be done when trying to add a Windows Vista machine to the domain using NETDOM.EXE remotely? After the initial install, the Windows Firewall is on and blocking ICMP, so I turn it off so that I can ping the machine. I use the following syntax:

NETDOM JOIN <IP Address> /Domain:<FQDN of domain> /UserD:<username of domain admin account> /PasswordD:* /UserO:<Local admin account> /PasswordO:* /REBoot:10 /verbose

Our Active Directory environment is Windows Server 2003 (Forest and Domain Functional Levels). I wrote a vbscript that uses the NETDOM tool and asks a series of questions for all of the variables, and have been successful with adding Windows Server 2003 and Windows XP Professional machines to the domain, but no success with the script or the native command line when trying to add a Vista-based workstation (possibly even Windows Server 2008-based systems too). NETDOM returns an "Error 5: Access is denied", even after verifying that all services are running, and that the passwords that are used are accurate. I am not sure if the User Account Control (UAC) may have something to do with the issues I am having. Is anyone else experiencing similar issues?


Thanks in advance for any assistance.




Paul Yhonquea, MCP

[Florian Frommherz [MVP]]

Howdie!

Paul Yhonquea schrieb:
> Windows Server 2008-based systems too). NETDOM returns an "Error 5:
> Access is denied", even after verifying that all services are running,
> and that the passwords that are used are accurate. I am not sure if the
> User Account Control (UAC) may have something to do with the issues I am
> having. Is anyone else experiencing similar issues?

have you tried running the script from an (UAC-)elevated command prompt?

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

[Marcin]

Paul,
either disable UAC on the target computers (you would want to make it part
of your OS provisioning process) - or use the instructions in
http://msdn.microsoft.com/en-us/libr...99(VS.85).aspx describing how
to handle remote connections under UAC...

hth
Marcin

"Paul Yhonquea" <none@none.com> wrote in message
news:elBHq$aLKHA.4432@TK2MSFTNGP05.phx.gbl...
Hello all,


Is there anything special that needs to be done when trying to add a Windows
Vista machine to the domain using NETDOM.EXE remotely? After the initial
install, the Windows Firewall is on and blocking ICMP, so I turn it off so
that I can ping the machine. I use the following syntax:

NETDOM JOIN <IP Address> /Domain:<FQDN of domain> /UserD:<username of domain
admin account> /PasswordD:* /UserO:<Local admin account> /PasswordO:*
/REBoot:10 /verbose

Our Active Directory environment is Windows Server 2003 (Forest and Domain
Functional Levels). I wrote a vbscript that uses the NETDOM tool and asks a
series of questions for all of the variables, and have been successful with
adding Windows Server 2003 and Windows XP Professional machines to the
domain, but no success with the script or the native command line when
trying to add a Vista-based workstation (possibly even Windows Server
2008-based systems too). NETDOM returns an "Error 5: Access is denied",
even after verifying that all services are running, and that the passwords
that are used are accurate. I am not sure if the User Account Control (UAC)
may have something to do with the issues I am having. Is anyone else
experiencing similar issues?


Thanks in advance for any assistance.




Paul Yhonquea, MCP

[Paul Yhonquea]

Hello,

In response to Florian Frommherz, When I run the script (or just use the
command line), I am normally logged into an administrative machine with a
domain administrator account. This machine is running Windows XP
Professional SP 3.

In response to Marcin, I will try the steps in disabling UAC that are
outlined in the document (web page) you gave me.

Thanks,


Paul Yhonquea, MCP


"Marcin" <marcin@community.nospam> wrote in message
news:uw6xBxhLKHA.1492@TK2MSFTNGP03.phx.gbl...
> Paul,
> either disable UAC on the target computers (you would want to make it part
> of your OS provisioning process) - or use the instructions in
> http://msdn.microsoft.com/en-us/libr...99(VS.85).aspx describing
> how to handle remote connections under UAC...
>
> hth
> Marcin