Unable to Join DOmain

[kamilpanna]

Hi Guys,

A weird problem has occured on my domain which has mre than 20 win2k servers, all of a sudden I cannot join any PC to the domain, the Error is get is

Unable to join Domain XYZ
Remote Procedure Call failed

1) No logs in the event viewer, PC or server
2) DNS and everything else is OK and works fine
3) if I try and enter an incorrect password for administrator while joining the domain it returns a correctr error of Incorrect Password, which means it is reaching the AD and actually tring to authenticate
4) this is happenning on al GCs and ADCs

Does anyone have any clue what is happenning? I dont see any Logs in event error except for 1 (see below) in the server but this is believe is related to the trusted domain I have and not related to the primary domain is question.

Event ID 1202
Security policies are propagated with warning. 0x6fc : The trust relationship between the primary domain and the trusted domain failed.

 

[ITPangaeaArchitect]

is there two segments to the network. meaning are the DCs separated by a router?

-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there

 

[kamilpanna]

yes and no, I have local Operations master with 2 additional DCs and the other 18 are on my WAN connected via Leased & DOD ISDN. The problwm seems to be everywhere.

 

[ITPangaeaArchitect]

when you say local operations master...is he running all 5 roles? what ports do you have open between the sites? ensure 135 TCP/UDP and 1024-5000 TCP/UDP are open. There are a whole slew of ports to check, but that would be the ones to start with based on the error.

-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there

 

[kamilpanna]

yes all roles, everything was fine sice 4 years till yesterday, no work has been done on any server no updates nothing.

Problem with win2K only it seems, it also creates the computer account in Active Directory and then backs off.

I find no logs in the DC or the PC wich can relate to this problems.

XP pro SP1 can jopin the domain without problems.

 

[kamilpanna]

The problem was identified, it was a MSRPC vulnerability patch by MS which was installed on the PCs which were not joining the domain, uninstalling the patch did the trick