Creating Computer Accounts in Domain

Question

I'm getting "Access Denied" from domain accounts that have been granted the permission to join a specific computer account to the domain.

It seems to work ok in our testing lab, but not in production.

When we create the computer account, we are selecting a non-privileged account under the "User or group that can join the computer to domain" option.

There is no error during the computer account creation, but the attribute "adm-UserOrGroupThatCanJoinComputerToDomain" is not being set either. Not sure this is supposed to be visible or not....

Thanks

Answer 1

Hello,

Please open the Permissions dialog for the computer and make sure there are permissions for the user in that dialog.

Comments

We'll investigate the issue. For now, please

• ensure that you are using the correct user name\password combination when prompted for credentials to add the computer to the domain.
• ensure that you entered the correct DNS Domain name for domain you are trying to join.

---

OUr pre-2000 domain was MITEK, our 2003 domain is mii.com. I used it trying to add the computer and got a different message: Another computer in the domain is already using the specified computer name.

---

What is the exact text of the error message?

---

"Your computer was joined to the domain but using the old name because: Another computer inthe domain is already using the specified computer name"

I have verified there is only the one computer name and it is the one I created with the Adaxes Create Computer function. It did not use that one but create one with the previous specified computer name(not the one I specified when attempting to join it to the domain) in the root Computer OU.

I tried this again by unjoining it back to Workgroups, changed the name first to the name in Active Directory, restarted, then joined it to the domain. It worked fine doing it that way. Thanks!

---

Unfortunately our QA team cannot reproduce the error... Is it reproducible in your environment?