joining domain problems with 2k servers

[TJ Farnsworth]

I have two windows 2000 server standard machines, newly
set up.

I have set up one as the domain controller, and the other
is just a workgroup machine right now. I want the other
to join the domain controller. I am doing that though
the 'network identification' in 'my computer'. What I get
is a network identificion error validating the domain
name. It says, 'condition may be caused by dns lookup
problem'.

I am an intermediate at 2000, but have never had two
servers on a domain controller before. Can you help?

Thanks in advance.

PS- I posted this in networking too, which I know isn't
nice, but I wasn't sure where it goes.

 

[Lanwench [MVP - Exchange]]

I have two windows 2000 server standard machines, newly
set up.

I have set up one as the domain controller, and the other
is just a workgroup machine right now. I want the other
to join the domain controller. I am doing that though
the 'network identification' in 'my computer'. What I get
is a network identificion error validating the domain
name. It says, 'condition may be caused by dns lookup
problem'.

I am an intermediate at 2000, but have never had two
servers on a domain controller before. Can you help?

This can occur due to DNS misconfiguration. All servers and workstations
should specify *only* the internal AD-integrated DNS server's IP address in
their network settings. The AD-integrated DNS server should be set up with
forwarders to your ISP's DNS servers for external resolution. See
http://support.microsoft.com/default.aspx?scid=kb;en-us;300202 for more
info.

 

[Guest]

Awesome- thanks, that was a BIG help and taught me how to
configure a DNS server for internet use. Does that mean I
can use my serve for DNS even from outside the network if
I expose it properly on the firewall?

Also, niow my problem is that when my other server tries
to join the domain it says that no mapping between
accopunt names and security IDs was done- any ideas?

thanks again!

 

[Lanwench [MVP - Exchange]]

Awesome- thanks, that was a BIG help and taught me how to
configure a DNS server for internet use. Does that mean I
can use my serve for DNS even from outside the network if
I expose it properly on the firewall?

Well, I suppose you could, but why would you? If you are using VPN, you can
specify your local DNS server's IP in your VPN client IP config for local
resolution...I wouldn't open up access through the firewall otherwise.

Also, niow my problem is that when my other server tries
to join the domain it says that no mapping between
accopunt names and security IDs was done- any ideas?

What's the exact error message & what do you see in the event logs on the
'other server' ?

 

[TJ Farnsworth]

I looked in the event log of both servers, the DC and the
one trying to join, and there were no errors. The error
message when I am trying to join the domain is just:

Error when trying to join domain 'x'
no mapping between account names and security IDs was done.

any ideas?

Thanks again!

 

[TJ Farnsworth]

The error is just:

Error when trying to join the domain "x"
no mapping between account names and security IDs was done

 

[Guest]

There appears to be no erros in teh event logs on either
the DC or the joining server.

All I get after I put in teh username and pass when trying
to join the domian is:

Error when trying to join domain 'crazyjumper'
no mapping between usernames and security IDs has been
done.

thoughts?

 

[Lanwench [MVP - Exchange]]

Had you manually added the computer account previously? Are you logging in
with an account that has the right to do this (as in, domain admin, etc)?

I googled for you -

http://www.jsiinc.com/SUBG/TIP3100/rh3190.htm ?
http://www.microsoft.com/windows2000/techinfo/reskit/samplechapters/dsbi/dsbi_add_zgsr.asp ?
http://www.dalantech.com/boards/sho...6-page-2-view-collapsed-sb-5-o--fpart-1.html?
http://www.freelists.org/archives/win2kforum/05-2001/msg00107.html ?

 

[TJ Farnsworth]

you are my new best friend.

-----Original Message-----
Had you manually added the computer account previously? Are you logging in
with an account that has the right to do this (as in, domain admin, etc)?

I googled for you -

http://www.jsiinc.com/SUBG/TIP3100/rh3190.htm ?
http://www.microsoft.com/windows2000/techinfo/reskit/sampl

echapters/dsbi/dsbi_add_zgsr.asp ?

 

[Lanwench [MVP - Exchange]]

Excellent. For my birthday, I want a pony, and a new baseball mitt, and a
cake with roses on it, and also a pony!