Cannot unjoin servers from my domain (Win2k3)

-

hi,

we tried unjoin , re-join 1 of our servers from/to domain. when tried unjoin server domain, using built-in administrator account, got the following error message: "the following error occurred attempting unjoin domain "mvs.co.il": access denied".

after googling found out netsetup.log file , looked @ , found there:
07/07 16:55:06 -----------------------------------------------------------------  07/07 16:55:06 netpunjoindomain: unjoin 'sw1' using 'sw1\administrator' creds, options: 0x0  07/07 16:55:06  os version: 5.2  07/07 16:55:06  build number: 3790  07/07 16:55:06  servicepack: service pack 2  07/07 16:55:06 netpunjoindomain: status of getting computer name: 0x0  07/07 16:55:06 netpapplyjoinstate: actions: 0x2b005a  07/07 16:55:06 failed open scmanager  07/07 16:55:06 netpapplyjoinstate: status of stopping , setting start type of netlogon 16: 0x5  07/07 16:55:06 netpapplyjoinstate: initiating rollback due earlier errors  07/07 16:55:06 netpapplyjoinstate: actions: 0x40000  07/07 16:55:06 netpgetlsaprimarydomain: status: 0x0  07/07 16:55:06 netpunjoindomain: status: 0x5
additional info:
sw1 = our old netbios name of domain.
mvs.co.il = our new dns name of domain.



thanks in advance,
yuval.
yuvalk

hi,

 

according following message, seems failed change status of service:

 

07/07 16:55:06 failed open scmanager

07/07 16:55:06 netpapplyjoinstate: status of stopping , setting start type of netlogon 16: 0x5

 

you can manually restart netlogon service , check if encounter “access denied” error.

 

a possible cause of issue configured system services policy (computer configuration\windows settings\security settings\system services) change security setting net logon service. can run rsop.msc on member server verify it.

 

if there no system services policy applied server, please refer following article reset permission netlogon service:

 

http://support.microsoft.com/?id=257247

 

note: please backup registry key before delete it.

 

thanks.



Windows Server  >  Windows Server General Forum



Comments

Post a Comment

Popular posts from this blog

WIMMount (HSM) causing cluster storage to go redirected (2012r2 DC)

-
looking options resolve error , prevent in future. thanks help. hardware: 2 node dell hv cluster running2012r2 dc 8 nic/ea in multiplex mode 4x hyper-v 4x hosts storage: 2x synology nas, accessed through iscsi hosts , cluster relevant logs: log name:      microsoft-windows-failoverclustering/diagnostic source:        microsoft-windows-failoverclustering date:          event id:      2050 task category: none level:         warning keywords:       user:          system computer:      l description: [dcm] filter wimmount found @ unsafe altitude 180700 log name:      system source:        microsoft-windows-failoverclustering ...
Read more

Failed to delete the test record dcdiag-test-record in zone test.com

-
ps c:\users\administrator.test> dcdiag /test:dns directory server diagnosis performing initial setup:    trying find home server...    home server = dc02    * identified ad forest.    done gathering initial info. doing initial required tests    testing server: default-first-site-name\dc02       starting test: connectivity          ......................... dc02 passed test connectivity doing primary tests    testing server: default-first-site-name\dc02       starting test: dns          dns tests running , not hung. please wait few minutes...          ......................... dc02 passed test dns    running partition tests on : forestdnszones    running partition tests on : domaindnszones    running partition tests on : schema ...
Read more

Azure MFA with Azure AD and RDS

-
i have setup following lab in azure , need help. a server (domain controller) , remote desktop services. and server multi factor authentication server. i have setup following one http://www.rdsgurus.com/uncategorized/step-by-step-using-windows-server-2012-r2-rd-gateway-with-azure-multifactor-authentication/ and when im connecting got following error. the user "domain\username", on client computer "xxx.xxx.xxx.xxx", did not meet connection authorization policy requirements , therefore not authorized access rd gateway server. authentication method used was: "ntlm" , connection protocol used: "rpc-http". following error occurred: "23003". also on security log i've got following authentication details: connection request policy name: ts gateway authorization policy network policy name: - authentication provider: radius proxy authentication server: test.test.local authenticati...
Read more