Joining a Domain

[Jim Thompson]

Getting error "No mapping between account names and
security IDs was done" when trying to join the domain.
Has anyone had this error when using an account to join
the domain and how did you fix it.

 

[Tom Ausburne]

This can be caused by a couple of things.

1.This error can occur if the account used to join the workstation to
the domain does not have the "Add Workstations To Domain" policy
right.

2. SMB signing may have been turned off on the client. You can turn
this off on the server by changing the Default Domain Controller
Policy under:

"Computer Configuration\Windows Settings\Security Settings\Local
Policies\Security Options"

Domain member: Digitally encrypt or sign secure channel data (always)
Disabled
Domain member: Digitally encrypt secure channel data (when possible)
Enabled
Domain member: Digitally sign secure channel data (when possible)
Enabled
Domain member: Require strong (Windows 2000 or later) session key
Disabled

I hope this helps.

Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.