Using domain join UI to join a workgroup computer to an AD domain by specifying the target DNS domain name fails - Windows Server

Windows 7 or Windows Server 2008 R2 domain name join displays error (Changing the Primary Domain DNS name of this computer đồ sộ "" failed....)

This article provides a solution đồ sộ an error that occurs when you use the domain name join User Interface (UI) đồ sộ join a Windows 7 or Windows Server 2008 R2 workgroup computer đồ sộ an Active Directory domain name by specifying the target DNS domain name name.

Original KB number:   2018583

Symptoms

Using the domain name join UI đồ sộ join a Windows 7 or Windows Server 2008 R2 workgroup computer đồ sộ an Active Directory domain name by specifying the target DNS domain name name fails with the following on-screen error:

Changing the Primary Domain DNS name of this computer đồ sộ "" failed. The name will remain ".".
The error was:

The specified server cannot perform the required operation.

The NETSETUP.LOG on the computer being joined contains the following text:

NetpSetDnsHostNameAndSpn: NetpLdapBind failed: 0x3a

where 0x3a maps to:

Cases where the "Changing the Primary Domain DNS name.." error appears in conjunction with extended errors other kêu ca "the specified server cannot perform the required operation", including those listed in the table below, are NOT related đồ sộ the symptom, cause, or resolution text discussed in this article.

The Extended errors that make the "Changing the Primary DNS name..." error unrelated đồ sộ this KB include:

Cause

When a computer is joined đồ sộ the domain name, it attempts đồ sộ register a Service Principal Name đồ sộ ensure that its DNS suffix is allowed in the target domain name. The domain name join UI queries information from the Local Security Authority (LSA) policy database for the short (NetBIOS) and long (DNS) names of the target domain name.

The error described in the Symptoms section occurs because a function in the domain name join UI improperly performs a LDAP bind đồ sộ a Domain Controller in the target domain name by its short name, which fails in one of the following conditions:

• The Disable NetBIOS over TCP/IP checkbox has been disabled in the IPv4 properties of the computer being joined.
• Connectivity over UDP port 137 is blocked between client and the helper DC servicing the join operation in the target domain name.
• The TCP/IPv4 protocol has been disabled so sánh that the client being joined or the DC in the destination domain name targeted by the LDAP BIND is running TCP/IPv6 only.

Resolution

Despite the appearance of the on-screen error described in the Symptoms section, the domain name join operation completes as evidenced by the status in the NETSETUP.LOG.

NetpCompleteOfflineDomainJoin SUCCESS: Requested a reboot :0x0
NetpDoDomainJoin: status: 0x0

To eliminate the error, use one of the following methods:

• Verify that NetBIOS over TCP/IP is enabled.

  1. Click Start, click Run, type ncpa.cpl, and then click OK.
  2. In Network Connections, right-click Local Area Connection, and then click Properties.
  3. Click Internet Protocol Version 4 (TCP/IPv4), and then click Properties.
  4. In the Internet Protocol Version 4 (TCP/IPv4) Properties dialog box, click Advanced.
  5. On the WINS tab, verify Enable NetBIOS Over TCP/IP is enabled, and then click OK three times.

• Verify end-to-end network connectivity over UDP port 137 over the network path connecting the client being and the helper DC serving the join operation.

• If the error occurred in an IPv6 only environment or you require a fix đồ sộ resolve the error, open a tư vấn incident with Microsoft Customer Service and Support requesting a post RTM fix for Windows 7/Windows Server 2008 R2.

• Add Domain DNS Suffix in the TCP/IP Properties.

  1. Click Start, click Run, type ncpa.cpl, and then click OK.
  2. In Network Connections, right-click Local Area Connection, and then click Properties.
  3. Click Internet Protocol Version 4 (TCP/IPv4), and then click Properties.
  4. In the Internet Protocol Version 4 (TCP/IPv4) Properties dialog box, click Advanced.
  5. On the DNS tab, select these DNS Suffixes, click Add, type the FQDN of the domain name in the DNS Server dialog box, click Add, and then click OK three times.