Joining Domain

[Our Michael]

Hi all, i scoured the threads quickly and couldn't find one related to this, so a general question please. I use Setup Manager in Windows and the wizards to create either unattend files or RIS answer files, and then modify them later if i need to

Why is there no option when creating a RIS answer file to join a domain, as there is with an unattend? Does anyone know how to modify a remboot.sif to enable a computer to join a domain?

Thanks

[cluberti]

Instead of JoinWorkstation, use the following:

[identification]

JoinDomain = YOURNETBIOSDOMAINNAMEHERE

DoOldStyleDomainJoin = YES

[RogueSpear]

Take a peek at the sample .SIF file that I included in my RIS guide. Should steer you in the right direction.

[jfmartel]

Anyone here using RIS on a 2003 SP1 server?

It seems like this isn't working anymore with new undocumented security feature introduced with SP1.

[identification]JoinDomain = YOURNETBIOSDOMAINNAMEHERE

DoOldStyleDomainJoin = YES

I've searched a lot on google and I can't get it working.

[cluberti]

Works just fine here, with many Server 2003 SP1 (and now some Server 2003 R2) RIS servers - I'd say the problem lies not within RIS, but somewhere else in your AD. Does the user account you are using have the rights to add machines to the domain?

[jfmartel]

Works just fine here, with many Server 2003 SP1 (and now some Server 2003 R2) RIS servers - I'd say the problem lies not within RIS, but somewhere else in your AD. Does the user account you are using have the rights to add machines to the domain?

Yes, for testing purpose, I'm using the domain "Administrator" account. Can't be more powerful than that...

Here is my SIF file:

;SetupMgrTag
[Data]
	AutoPartition=0
	MsDosInitiated="1"
	UnattendedInstall="Yes"
	floppyless="1"
	OriSrc="\\%SERVERNAME%\RemInst\%INSTALLPATH%"
	OriTyp="4"
	LocalSourceOnCD=1
	AutomaticUpdates=yes

[SetupData]
	OsLoadOptions="/noguiboot /fastdetect"
	SetupSourceDevice="\Device\LanmanRedirector\%SERVERNAME%\RemInst\%INSTALLPATH%"

[Unattended]
	UnattendMode=FullUnattended
	OemSkipEula=Yes
	OemPreinstall=Yes
	OemPNPDriversPath=*
	DriverSigningPolicy=Ignore
	TargetPath=\WINDOWS
	FileSystem=LeaveAlone
	NtUpgrade=No
	OverwriteOemFilesOnUpgrade=No
	UnattendSwitch=Yes
	Hibernation=No
	DUDisable=Yes
	Repartition=Yes

[GuiUnattended]
	AdminPassword=SomeEncryptedPassword
	EncryptedAdminPassword=Yes
	OEMSkipRegional=1
	TimeZone=%TIMEZONE%
	OemSkipWelcome=1
	ProfilesDir="%SYSTEMDRIVE%\Usagers"

[UserData]
	ProductID=AAAAA-11111-AAAAA-11111-AAAAA
	FullName="ADMIN"
	OrgName=%MACHINEDOMAIN%
	ComputerName=%MACHINENAME%

[TapiLocation]
	CountryCode=107
	Dialing=Tone
	AreaCode=418

[RegionalSettings]
	LanguageGroup=1
	SystemLocale=00000c0c
	UserLocale=00000c0c
	InputLocale=0c0c:00001009

[Identification]
	JoinDomain = %MACHINEDOMAIN%
	CreateComputerAccountInDomain = No
	DoOldStyleDomainJoin = Yes

[Networking]
	InstallDefaultComponents=Yes
	ProcessPageSections=Yes

[RemoteInstall]
	Repartition=Yes

[OSChooser]
	Description="Windows Professionel SP2 - Machine Type"
	Help="Will install Windows SP2 on Machine Type"
	LaunchFile="%INSTALLPATH%\%MACHINETYPE%\templates\startrom.com"
	ImageType=Flat

[Shell]
	DefaultThemesOff=Yes
	DefaultStartPanelOff=Yes

[Components]
	msnexplr=Off
	zonegames=Off

[Display]
	BitsPerPel = 32
	XResolution = 800
	YResolution = 600

[GuiRunOnce]
	"\\%SERVERNAME%\SHARE$\Script\wksn.cmd"
	"\\%SERVERNAME%\SHARE$\Script\cleanup.cmd"

For my domain, it's a brand new. Got a DNS andDHCP, that's all.

I know my DHCP is working and machine gets added to the Domain with the CIW.

Is there any log file I can search to get information about my possible problem. Event viewer has nothing logged about that.

Thanks!

Edited January 6, 2006 by jfmartel

[cluberti]

"CreateComputerAccountInDomain = No"

Since we're using the "old" NT4-style domain join in a Winnt.sif file, this is technically what is causing your issue. It needs to add the machine to the domain AND write the SID to the computer account. If you remove this option, it should start working again.

Are the computer accounts prestaged in the AD console for RIS?

[jfmartel]

"CreateComputerAccountInDomain = No"

Since we're using the "old" NT4-style domain join in a Winnt.sif file, this is technically what is causing your issue. It needs to add the machine to the domain AND write the SID to the computer account. If you remove this option, it should start working again.

Are the computer accounts prestaged in the AD console for RIS?

Thanks for the answer. I'll try it right now.

For the pre-staged thing, I don't know how this work.

I've read about this, but I don't know where to get the GUID and I don't have MAC address of all the computer I got.

[jfmartel]

Still doesn't work. Is there any log file somewhere I can check to see what's going inside the process of the RIS on my workstation?

I'm starting to think about a complete full reinstall of my test environment.

This is driving me nut.

Ill keep a backup of my Windows distribution and retry on a clean reinstall.

I'll keep you updated on the situation.

Thanks!

[RogueSpear]

Try doing IPCONFIG /ALL from a command prompt to get the MAC address. Alternatively, you could go to the DHCP snapin and look at the leases to find it.

[cluberti]

The Setup*.log files in the Windows directory should show what (if anything) was logged during the install.

[jfmartel]

Thanks

Here is the error I got from setuperr.log

Netsetup:Join domain XXXXXXXX in full unattended mode failed. Setup will proceed to add the workstation to the default domain

[-I-]

what exactly is your domainname.

if had this problem myself, 1 time and not (completely) understould what it was, that exactly caused my problem (but than again im not authorized to change any networkwide policys, or even have access to them.....

but i do know that in some cases Unatanded Add-domain options fail to resolve the DNS records for a domain, but instead of :::

[ for example]

• using the full domain name:
  Like: users.mysite.company.lan (
  
• using the old netbui ... name (dosname????)
  Like: shortname
  

seams to solve many isues...

hope this helps anyone...

Edited January 6, 2006 by -I-

[cluberti]

What is the %domainname% variable pointing to? If it's an FQDN, the domain join will also fail. Perhaps hard-coding it (for testing purposes) may tell us more?

[jfmartel]

First of all, I'd like to thank everyone for helping me out.

I switched in my sif sif the variable %machinedomain% for my short domain name and it worked.

So my problem has maybe somehting to do with my DNS