none
Clients not authenticated to RODC.

    Question

  • Good day, 

    I setup recently RODC on new site, but clients there when logon they show that clients is authenticate to DC. 

    I run  on client echo %logonserver% and show that PC is login on DC.

    Thanks


    Shamir Jamu Gulamo

    Tuesday, May 2, 2017 8:54 AM

All replies

  • Hi Shamir,
    Is the RODC installing as a DNS server? If yes, please check if the DNS address of clients is pointed to IP address of RODC.
    Best regards, 
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Tuesday, May 2, 2017 9:14 AM
    Moderator
  • Hi Wendy, Thanks for your reply. Yes RODC is a DNS and DHCP. All clients IP address is pointing to the RODC.

    With Thanks


    Shamir Jamu Gulamo

    Wednesday, May 3, 2017 5:02 AM
  • Hi,

    I have made accord with the link but still not authenticate. See some configuration on my RODC.

    Sorry for the long text.

    On client i run Set:

    H:\>echo %logonserver%
    \\MPT-LAB-DC-01
    H:\>set
    ALLUSERSPROFILE=C:\ProgramData
    APPDATA=C:\Users\Isaura.Luciano\AppData\Roaming
    CommonProgramFiles=C:\Program Files\Common Files
    COMPUTERNAME=BR-LAB-CL-01
    ComSpec=C:\Windows\system32\cmd.exe
    FP_NO_HOST_CHECK=NO
    HOMEDRIVE=H:
    HOMEPATH=\
    HOMESHARE=\\MPT-LAB-FS-01\UserData$\Isaura.Luciano
    LOCALAPPDATA=C:\Users\Isaura.Luciano\AppData\Local
    LOGONSERVER=\\MPT-LAB-DC-01
    NUMBER_OF_PROCESSORS=4
    OS=Windows_NT
    Path=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32
    \WindowsPowerShell\v1.0\
    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
    PROCESSOR_ARCHITECTURE=x86
    PROCESSOR_IDENTIFIER=x86 Family 6 Model 37 Stepping 5, GenuineIntel
    PROCESSOR_LEVEL=6
    PROCESSOR_REVISION=2505
    ProgramData=C:\ProgramData
    ProgramFiles=C:\Program Files
    PROMPT=$P$G
    PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
    PUBLIC=C:\Users\Public
    SESSIONNAME=Console
    SystemDrive=C:
    SystemRoot=C:\Windows
    TEMP=C:\Users\ISAURA~1.LUC\AppData\Local\Temp
    TMP=C:\Users\ISAURA~1.LUC\AppData\Local\Temp
    USERDNSDOMAIN=LAB.TDM.LOCAL
    USERDOMAIN=LAB
    USERNAME=Isaura.Luciano
    USERPROFILE=C:\Users\Isaura.Luciano
    windir=C:\Windows
    windows_tracing_flags=3
    windows_tracing_logfile=C:\BVTBin\Tests\installpackage\csilogfile.log
    

    NetSetup.logon on client:

    04/04/2017 11:37:21:362 ----------------------------------------------------------------- 04/04/2017 11:37:21:362 NetpValidateName: checking to see if 'BR-LAB-CL-01' is valid as type 1 name 04/04/2017 11:37:24:482 NetpCheckNetBiosNameNotInUse for 'BR-LAB-CL-01' [MACHINE] returned 0x0 04/04/2017 11:37:24:482 NetpValidateName: name 'BR-LAB-CL-01' is valid for type 1 04/04/2017 11:37:24:497 ----------------------------------------------------------------- 04/04/2017 11:37:24:497 NetpValidateName: checking to see if 'BR-LAB-CL-01' is valid as type 5 name 04/04/2017 11:37:24:497 NetpValidateName: name 'BR-LAB-CL-01' is valid for type 5 04/04/2017 11:41:45:906 ----------------------------------------------------------------- 04/04/2017 11:41:45:906 NetpValidateName: checking to see if 'BR-LAB-CL-01' is valid as type 1 name 04/04/2017 11:41:45:953 NetpCheckNetBiosNameNotInUse for 'BR-LAB-CL-01' [MACHINE] returned 0x0 04/04/2017 11:41:45:953 NetpValidateName: name 'BR-LAB-CL-01' is valid for type 1 04/04/2017 11:41:45:984 ----------------------------------------------------------------- 04/04/2017 11:41:45:984 NetpValidateName: checking to see if 'BR-LAB-CL-01' is valid as type 5 name 04/04/2017 11:41:45:984 NetpValidateName: name 'BR-LAB-CL-01' is valid for type 5 04/04/2017 11:41:46:015 ----------------------------------------------------------------- 04/04/2017 11:41:46:015 NetpValidateName: checking to see if 'lab.tdm.local' is valid as type 3 name 04/04/2017 11:41:46:140 NetpCheckDomainNameIsValid [ Exists ] for 'lab.tdm.local' returned 0x0 04/04/2017 11:41:46:140 NetpValidateName: name 'lab.tdm.local' is valid for type 3 04/04/2017 11:42:01:202 ----------------------------------------------------------------- 04/04/2017 11:42:01:202 NetpDoDomainJoin 04/04/2017 11:42:01:202 NetpMachineValidToJoin: 'BR-LAB-CL-01' 04/04/2017 11:42:01:202 OS Version: 6.1 04/04/2017 11:42:01:202 Build number: 7601 (7601.win7sp1_rtm.101119-1850) 04/04/2017 11:42:01:202 ServicePack: Service Pack 1 04/04/2017 11:42:01:202 SKU: Windows 7 Professional 04/04/2017 11:42:01:202 NetpDomainJoinLicensingCheck: ulLicenseValue=1, Status: 0x0 04/04/2017 11:42:01:202 NetpGetLsaPrimaryDomain: status: 0x0 04/04/2017 11:42:01:202 NetpMachineValidToJoin: status: 0x0 04/04/2017 11:42:01:202 NetpJoinDomain 04/04/2017 11:42:01:202 Machine: BR-LAB-CL-01 04/04/2017 11:42:01:202 Domain: lab.tdm.local 04/04/2017 11:42:01:202 MachineAccountOU: (NULL) 04/04/2017 11:42:01:202 Account: lab.tdm.local\Administrator 04/04/2017 11:42:01:202 Options: 0x25 04/04/2017 11:42:01:202 NetpLoadParameters: loading registry parameters... 04/04/2017 11:42:01:202 NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2 04/04/2017 11:42:01:202 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2 04/04/2017 11:42:01:202 NetpLoadParameters: status: 0x2 04/04/2017 11:42:01:202 NetpValidateName: checking to see if 'lab.tdm.local' is valid as type 3 name 04/04/2017 11:42:01:327 NetpCheckDomainNameIsValid [ Exists ] for 'lab.tdm.local' returned 0x0 04/04/2017 11:42:01:327 NetpValidateName: name 'lab.tdm.local' is valid for type 3 04/04/2017 11:42:01:327 NetpDsGetDcName: trying to find DC in domain 'lab.tdm.local', flags: 0x40001010 04/04/2017 11:42:04:135 NetpDsGetDcName: failed to find a DC having account 'BR-LAB-CL-01$': 0x525, last error is 0x0 04/04/2017 11:42:04:135 NetpLoadParameters: loading registry parameters... 04/04/2017 11:42:04:135 NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2 04/04/2017 11:42:04:135 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2 04/04/2017 11:42:04:135 NetpLoadParameters: status: 0x2 04/04/2017 11:42:04:135 NetpDsGetDcName: status of verifying DNS A record name resolution for 'MPT-LAB-DC-01.lab.tdm.local': 0x0 04/04/2017 11:42:04:135 NetpDsGetDcName: found DC '\\MPT-LAB-DC-01.lab.tdm.local' in the specified domain 04/04/2017 11:42:04:135 NetpJoinDomainOnDs: NetpDsGetDcName returned: 0x0 04/04/2017 11:42:04:322 NetpJoinDomain: status of connecting to dc '\\MPT-LAB-DC-01.lab.tdm.local': 0x0 04/04/2017 11:42:04:322 NetpProvisionComputerAccount: 04/04/2017 11:42:04:322 lpDomain: lab.tdm.local 04/04/2017 11:42:04:322 lpMachineName: BR-LAB-CL-01 04/04/2017 11:42:04:322 lpMachineAccountOU: (NULL) 04/04/2017 11:42:04:322 lpDcName: MPT-LAB-DC-01.lab.tdm.local 04/04/2017 11:42:04:322 lpDnsHostName: (NULL) 04/04/2017 11:42:04:322 lpMachinePassword: (null) 04/04/2017 11:42:04:322 lpAccount: lab.tdm.local\Administrator 04/04/2017 11:42:04:322 lpPassword: (non-null) 04/04/2017 11:42:04:322 dwJoinOptions: 0x25 04/04/2017 11:42:04:322 dwOptions: 0x40000003 04/04/2017 11:42:04:431 NetpLdapBind: Verified minimum encryption strength on MPT-LAB-DC-01.lab.tdm.local: 0x0 04/04/2017 11:42:04:431 NetpLdapGetLsaPrimaryDomain: reading domain data 04/04/2017 11:42:04:431 NetpGetNCData: Reading NC data 04/04/2017 11:42:04:431 NetpGetDomainData: Lookup domain data for: DC=lab,DC=tdm,DC=local 04/04/2017 11:42:04:431 NetpGetDomainData: Lookup crossref data for: CN=Partitions,CN=Configuration,DC=lab,DC=tdm,DC=local 04/04/2017 11:42:04:447 NetpLdapGetLsaPrimaryDomain: result of retrieving domain data: 0x0 04/04/2017 11:42:04:463 NetpGetComputerObjectDn: Cracking DNS domain name lab.tdm.local/ into Netbios on \\MPT-LAB-DC-01.lab.tdm.local 04/04/2017 11:42:04:478 NetpGetComputerObjectDn: Crack results: name = LAB\ 04/04/2017 11:42:04:478 NetpGetComputerObjectDn: Cracking account name LAB\BR-LAB-CL-01$ on \\MPT-LAB-DC-01.lab.tdm.local 04/04/2017 11:42:04:478 NetpGetComputerObjectDn: Crack results: Account does not exist 04/04/2017 11:42:04:478 NetpCreateComputerObjectInDs: NetpGetComputerObjectDn failed: 0x534 04/04/2017 11:42:04:478 NetpProvisionComputerAccount: LDAP creation failed: 0x534 04/04/2017 11:42:04:478 ldap_unbind status: 0x0 04/04/2017 11:42:04:478 NetpJoinDomainOnDs: Function exits with status of: 0x534 04/04/2017 11:42:04:478 NetpJoinDomainOnDs: status of disconnecting from '\\MPT-LAB-DC-01.lab.tdm.local': 0x0 04/04/2017 11:42:04:478 NetpDoDomainJoin: status: 0x534 04/04/2017 11:42:04:509 ----------------------------------------------------------------- 04/04/2017 11:42:04:509 NetpDoDomainJoin 04/04/2017 11:42:04:509 NetpMachineValidToJoin: 'BR-LAB-CL-01' 04/04/2017 11:42:04:509 OS Version: 6.1 04/04/2017 11:42:04:509 Build number: 7601 (7601.win7sp1_rtm.101119-1850) 04/04/2017 11:42:04:509 ServicePack: Service Pack 1 04/04/2017 11:42:04:509 SKU: Windows 7 Professional 04/04/2017 11:42:04:509 NetpDomainJoinLicensingCheck: ulLicenseValue=1, Status: 0x0 04/04/2017 11:42:04:509 NetpGetLsaPrimaryDomain: status: 0x0 04/04/2017 11:42:04:509 NetpMachineValidToJoin: status: 0x0 04/04/2017 11:42:04:509 NetpJoinDomain 04/04/2017 11:42:04:509 Machine: BR-LAB-CL-01 04/04/2017 11:42:04:509 Domain: lab.tdm.local 04/04/2017 11:42:04:509 MachineAccountOU: (NULL) 04/04/2017 11:42:04:509 Account: lab.tdm.local\Administrator 04/04/2017 11:42:04:509 Options: 0x27 04/04/2017 11:42:04:509 NetpLoadParameters: loading registry parameters... 04/04/2017 11:42:04:509 NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2 04/04/2017 11:42:04:509 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2 04/04/2017 11:42:04:509 NetpLoadParameters: status: 0x2 04/04/2017 11:42:04:509 NetpValidateName: checking to see if 'lab.tdm.local' is valid as type 3 name 04/04/2017 11:42:04:619 NetpCheckDomainNameIsValid [ Exists ] for 'lab.tdm.local' returned 0x0 04/04/2017 11:42:04:619 NetpValidateName: name 'lab.tdm.local' is valid for type 3 04/04/2017 11:42:04:619 NetpDsGetDcName: trying to find DC in domain 'lab.tdm.local', flags: 0x40001010 04/04/2017 11:42:07:427 NetpDsGetDcName: failed to find a DC having account 'BR-LAB-CL-01$': 0x525, last error is 0x0 04/04/2017 11:42:07:427 NetpLoadParameters: loading registry parameters... 04/04/2017 11:42:07:427 NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2 04/04/2017 11:42:07:427 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2 04/04/2017 11:42:07:427 NetpLoadParameters: status: 0x2 04/04/2017 11:42:07:427 NetpDsGetDcName: status of verifying DNS A record name resolution for 'MPT-LAB-DC-01.lab.tdm.local': 0x0 04/04/2017 11:42:07:427 NetpDsGetDcName: found DC '\\MPT-LAB-DC-01.lab.tdm.local' in the specified domain 04/04/2017 11:42:07:427 NetpJoinDomainOnDs: NetpDsGetDcName returned: 0x0 04/04/2017 11:42:07:427 NetpJoinDomain: status of connecting to dc '\\MPT-LAB-DC-01.lab.tdm.local': 0x0 04/04/2017 11:42:07:427 NetpProvisionComputerAccount: 04/04/2017 11:42:07:427 lpDomain: lab.tdm.local 04/04/2017 11:42:07:427 lpMachineName: BR-LAB-CL-01 04/04/2017 11:42:07:427 lpMachineAccountOU: (NULL) 04/04/2017 11:42:07:427 lpDcName: MPT-LAB-DC-01.lab.tdm.local 04/04/2017 11:42:07:427 lpDnsHostName: (NULL) 04/04/2017 11:42:07:427 lpMachinePassword: (null) 04/04/2017 11:42:07:427 lpAccount: lab.tdm.local\Administrator 04/04/2017 11:42:07:427 lpPassword: (non-null) 04/04/2017 11:42:07:427 dwJoinOptions: 0x27 04/04/2017 11:42:07:427 dwOptions: 0x40000003 04/04/2017 11:42:07:427 NetpLdapBind: Verified minimum encryption strength on MPT-LAB-DC-01.lab.tdm.local: 0x0 04/04/2017 11:42:07:427 NetpLdapGetLsaPrimaryDomain: reading domain data 04/04/2017 11:42:07:427 NetpGetNCData: Reading NC data 04/04/2017 11:42:07:427 NetpGetDomainData: Lookup domain data for: DC=lab,DC=tdm,DC=local 04/04/2017 11:42:07:427 NetpGetDomainData: Lookup crossref data for: CN=Partitions,CN=Configuration,DC=lab,DC=tdm,DC=local 04/04/2017 11:42:07:442 NetpLdapGetLsaPrimaryDomain: result of retrieving domain data: 0x0 04/04/2017 11:42:07:442 NetpGetComputerObjectDn: Cracking DNS domain name lab.tdm.local/ into Netbios on \\MPT-LAB-DC-01.lab.tdm.local 04/04/2017 11:42:07:442 NetpGetComputerObjectDn: Crack results: name = LAB\ 04/04/2017 11:42:07:442 NetpGetComputerObjectDn: Cracking account name LAB\BR-LAB-CL-01$ on \\MPT-LAB-DC-01.lab.tdm.local 04/04/2017 11:42:07:442 NetpGetComputerObjectDn: Crack results: Account does not exist 04/04/2017 11:42:07:442 NetpGetComputerObjectDn: Cracking Netbios domain name LAB\ into root DN on \\MPT-LAB-DC-01.lab.tdm.local 04/04/2017 11:42:07:442 NetpGetComputerObjectDn: Crack results: name = DC=lab,DC=tdm,DC=local 04/04/2017 11:42:07:442 NetpGetComputerObjectDn: Got DN CN=BR-LAB-CL-01,CN=Computers,DC=lab,DC=tdm,DC=local from the default computer container 04/04/2017 11:42:07:442 NetpModifyComputerObjectInDs: Initial attribute values: 04/04/2017 11:42:07:442 objectClass = Computer 04/04/2017 11:42:07:442 SamAccountName = BR-LAB-CL-01$ 04/04/2017 11:42:07:442 userAccountControl = 0x1000 04/04/2017 11:42:07:442 DnsHostName = BR-LAB-CL-01.lab.tdm.local 04/04/2017 11:42:07:442 ServicePrincipalName = HOST/BR-LAB-CL-01.lab.tdm.local RestrictedKrbHost/BR-LAB-CL-01.lab.tdm.local HOST/BR-LAB-CL-01 RestrictedKrbHost/BR-LAB-CL-01 04/04/2017 11:42:07:442 unicodePwd = <SomePassword> 04/04/2017 11:42:07:458 NetpModifyComputerObjectInDs: Computer Object does not exist in OU 04/04/2017 11:42:07:458 NetpModifyComputerObjectInDs: Attribute values to set: 04/04/2017 11:42:07:458 objectClass = Computer 04/04/2017 11:42:07:458 SamAccountName = BR-LAB-CL-01$ 04/04/2017 11:42:07:458 userAccountControl = 0x1000 04/04/2017 11:42:07:458 DnsHostName = BR-LAB-CL-01.lab.tdm.local 04/04/2017 11:42:07:458 ServicePrincipalName = HOST/BR-LAB-CL-01.lab.tdm.local RestrictedKrbHost/BR-LAB-CL-01.lab.tdm.local HOST/BR-LAB-CL-01 RestrictedKrbHost/BR-LAB-CL-01 04/04/2017 11:42:07:458 unicodePwd = <SomePassword> 04/04/2017 11:42:07:629 NetpEncodeProvisioningBlob: Encoding provisioning data 04/04/2017 11:42:07:629 NetpInitBlobWin7: Constructing blob... 04/04/2017 11:42:07:629 Blob version: 1 04/04/2017 11:42:07:629 lpDomain: lab.tdm.local 04/04/2017 11:42:07:629 lpMachineName: BR-LAB-CL-01 04/04/2017 11:42:07:629 lpMachinePassword: <omitted from log> 04/04/2017 11:42:07:629 DomainDnsPolicy: 04/04/2017 11:42:07:629 Name: LAB 04/04/2017 11:42:07:629 DnsDomainName: lab.tdm.local 04/04/2017 11:42:07:629 DnsForestName: lab.tdm.local 04/04/2017 11:42:07:629 DomainGuid: b97797d4-24bf-4447-9b3e-107ce181c82b 04/04/2017 11:42:07:629 Sid: S-1-5-21-3402444070-2202808628-572371233 04/04/2017 11:42:07:629 DcInfo: 04/04/2017 11:42:07:629 DomainControllerName: \\MPT-LAB-DC-01.lab.tdm.local 04/04/2017 11:42:07:629 DomainControllerAddress: \\192.168.20.11 04/04/2017 11:42:07:629 DomainControllerAddressType: 1 04/04/2017 11:42:07:629 DomainGuid: b97797d4-24bf-4447-9b3e-107ce181c82b 04/04/2017 11:42:07:629 DomainName: lab.tdm.local 04/04/2017 11:42:07:629 DnsForestName: lab.tdm.local 04/04/2017 11:42:07:629 Flags: 0xe000f3fd 04/04/2017 11:42:07:629 DcSiteName: Default-First-Site-Name 04/04/2017 11:42:07:629 ClientSiteName: Default-First-Site-Name 04/04/2017 11:42:07:629 Options: 0x40000003 04/04/2017 11:42:07:629 NetpInitBlobWin7: Blob pickling result: 0 04/04/2017 11:42:07:629 NetpEncodeProvisioningBlob: result: 0x0 04/04/2017 11:42:07:645 ldap_unbind status: 0x0 04/04/2017 11:42:07:645 NetpRequestOfflineDomainJoin: 04/04/2017 11:42:07:645 dwProvisionBinDataSize: 968 04/04/2017 11:42:07:645 JoinOptions: 0x27 04/04/2017 11:42:07:645 Options: 0x40000003 04/04/2017 11:42:07:645 lpWindowsPath: C:\Windows 04/04/2017 11:42:07:645 NetpDecodeProvisioningBlob: Unpickling provisioning blob with size 968 bytes 04/04/2017 11:42:07:645 NetpDecodeProvisioningBlob: Searching 1 blobs for supported ODJ blob, highest supported version: 1 04/04/2017 11:42:07:645 NetpDecodeProvisioningBlob: Found ODJ blob version: 1 04/04/2017 11:42:07:645 NetpDecodeProvisioningBlob: Selected ODJ blob version: 1 04/04/2017 11:42:07:645 Blob version: 1 04/04/2017 11:42:07:645 lpDomain: lab.tdm.local 04/04/2017 11:42:07:645 lpMachineName: BR-LAB-CL-01 04/04/2017 11:42:07:645 lpMachinePassword: <omitted from log> 04/04/2017 11:42:07:645 DomainDnsPolicy: 04/04/2017 11:42:07:645 Name: LAB 04/04/2017 11:42:07:645 DnsDomainName: lab.tdm.local 04/04/2017 11:42:07:645 DnsForestName: lab.tdm.local 04/04/2017 11:42:07:645 DomainGuid: b97797d4-24bf-4447-9b3e-107ce181c82b 04/04/2017 11:42:07:645 Sid: S-1-5-21-3402444070-2202808628-572371233 04/04/2017 11:42:07:645 DcInfo: 04/04/2017 11:42:07:645 DomainControllerName: \\MPT-LAB-DC-01.lab.tdm.local 04/04/2017 11:42:07:645 DomainControllerAddress: \\192.168.20.11 04/04/2017 11:42:07:645 DomainControllerAddressType: 1 04/04/2017 11:42:07:645 DomainGuid: b97797d4-24bf-4447-9b3e-107ce181c82b 04/04/2017 11:42:07:645 DomainName: lab.tdm.local 04/04/2017 11:42:07:645 DnsForestName: lab.tdm.local 04/04/2017 11:42:07:645 Flags: 0xe000f3fd 04/04/2017 11:42:07:645 DcSiteName: Default-First-Site-Name 04/04/2017 11:42:07:645 ClientSiteName: Default-First-Site-Name 04/04/2017 11:42:07:645 Options: 0x40000003 04/04/2017 11:42:07:645 NetpDoInitiateOfflineDomainJoin 04/04/2017 11:42:07:645 NetpDoInitiateOfflineDomainJoin: Setting backup/restore privileges 04/04/2017 11:42:07:645 NetpInitiateOfflineJoin 04/04/2017 11:42:07:645 lpLocalRegistryPath: C:\Windows\system32\config\SYSTEM 04/04/2017 11:42:07:645 dwOptions: 0x40000003 04/04/2017 11:42:07:645 NetpConvertBlobToJoinState: Translating provisioning data to internal format 04/04/2017 11:42:07:645 NetpConvertBlobToJoinState: Selecting version 1 04/04/2017 11:42:07:645 NetpConvertBlobToJoinState: exiting: 0x0 04/04/2017 11:42:07:645 NetpValidateFullJoinState: Validating provisioning data... 04/04/2017 11:42:07:645 NetpValidateFullJoinState: exiting: 0x0 04/04/2017 11:42:07:645 NetpClearFullJoinState: Removing cached state from the registry... 04/04/2017 11:42:07:645 NetpClearFullJoinState: Status of deleting join state key 0x2 04/04/2017 11:42:07:645 NetpSaveFullJoinStateInternal: Injecting provisioning data into image... 04/04/2017 11:42:07:661 NetpSaveFullJoinStateInternal: exiting: 0x0 04/04/2017 11:42:07:661 NetpSetComputerNamesOffline: Checking for pending name changes... 04/04/2017 11:42:07:661 SetHostName: TRUE 04/04/2017 11:42:07:661 SetDnsDomain: TRUE 04/04/2017 11:42:07:661 SetNetBiosName: TRUE 04/04/2017 11:42:07:661 SetCurrentValues: TRUE 04/04/2017 11:42:07:661 NetpSetComputerNamesOffline: Setting Hostname to BR-LAB-CL-01 04/04/2017 11:42:07:661 NetpSetComputerNamesOffline: Setting Domain name to lab.tdm.local 04/04/2017 11:42:07:661 NetpSetComputerNamesOffline: Setting NetBios computer name to BR-LAB-CL-01 04/04/2017 11:42:07:661 NetpDoInitiateOfflineDomainJoin: status: 0x0 04/04/2017 11:42:07:661 NetRequestOfflineDomainJoin: Successfully initiated the offline domain join 04/04/2017 11:42:07:661 NetpJoinDomainOnDs: Setting netlogon cache. 04/04/2017 11:42:07:707 NetpJoinDomainOnDs: status of setting netlogon cache: 0x0 04/04/2017 11:42:07:707 NetpJoinDomainOnDs: Function exits with status of: 0x0 04/04/2017 11:42:07:707 NetpJoinDomainOnDs: status of disconnecting from '\\MPT-LAB-DC-01.lab.tdm.local': 0x0 04/04/2017 11:42:07:707 NetpCompleteOfflineDomainJoin 04/04/2017 11:42:07:707 fBootTimeCaller: FALSE 04/04/2017 11:42:07:707 fSetLocalGroups: TRUE 04/04/2017 11:42:07:707 NetpLsaOpenSecret: status: 0xc0000034 04/04/2017 11:42:07:707 NetpGetLsaPrimaryDomain: status: 0x0 04/04/2017 11:42:07:707 NetpJoinDomainLocal: NetpHandleJoinedStateInfo returned: 0x0 04/04/2017 11:42:07:707 NetpLsaOpenSecret: status: 0xc0000034 04/04/2017 11:42:08:207 NetpJoinDomainLocal: NetpManageMachineSecret returned: 0x0. 04/04/2017 11:42:08:207 Calling NetpQueryService to get Netlogon service state. 04/04/2017 11:42:08:207 NetpJoinDomainLocal: NetpQueryService returned: 0x0. 04/04/2017 11:42:08:316 NetpSetLsaPrimaryDomain: for 'LAB' status: 0x0 04/04/2017 11:42:08:316 NetpJoinDomainLocal: status of setting LSA pri. domain: 0x0 04/04/2017 11:42:08:316 NetpManageLocalGroupsForJoin: Adding groups for new domain, removing groups from old domain, if any. 04/04/2017 11:42:08:316 NetpManageLocalGroups: Populating list of account SIDs. 04/04/2017 11:42:08:628 [00000c1c] NetpGetLsaPrimaryDomain: status: 0x0 04/04/2017 11:42:08:675 NetpManageLocalGroupsForJoin: status of modifying groups related to domain 'LAB' to local groups: 0x0 04/04/2017 11:42:08:675 NetpManageLocalGroupsForJoin: INFO: No old domain groups to process. 04/04/2017 11:42:08:675 NetpJoinDomainLocal: Status of managing local groups: 0x0 04/04/2017 11:42:09:158 [00000c20] NetpGetLsaPrimaryDomain: status: 0x0 04/04/2017 11:42:11:155 NetpJoinDomainLocal: status of setting ComputerNamePhysicalDnsDomain to 'lab.tdm.local': 0x0 04/04/2017 11:42:11:155 NetpJoinDomainLocal: Controlling services and setting service start type. 04/04/2017 11:42:11:155 NetpJoinDomainLocal: Updating W32TimeConfig 04/04/2017 11:42:11:155 NetpUpdateW32timeConfig: 0x0 04/04/2017 11:42:11:155 NetpClearFullJoinState: Removing cached state from the registry... 04/04/2017 11:42:11:155 NetpClearFullJoinState: Status of deleting join state key 0x0 04/04/2017 11:42:11:155 NetpCompleteOfflineDomainJoin: status: 0x0 04/04/2017 11:42:11:155 NetpJoinDomain: NetpCompleteOfflineDomainJoin SUCCESS: Requested a reboot :0x0 04/04/2017 11:42:11:155 NetpDoDomainJoin: status: 0x0 04/04/2017 11:42:13:338 ----------------------------------------------------------------- 04/04/2017 11:42:13:338 NetpChangeMachineName: from 'BR-LAB-CL-01' to 'BR-LAB-CL-01' using 'lab.tdm.local\Administrator' [0x1000] 04/04/2017 11:42:13:338 NetpDsGetDcName: trying to find DC in domain 'LAB', flags: 0x1010 04/04/2017 11:42:13:338 NetpDsGetDcName: found DC '\\MPT-LAB-DC-01' in the specified domain 04/04/2017 11:42:13:338 NetpGetLsaPrimaryDomain: status: 0x0 04/04/2017 11:42:13:338 NetpGetDnsHostName: Read NV Domain: lab.tdm.local 04/04/2017 11:42:13:369 NetpGetComputerObjectDn: Cracking account name LAB\BR-LAB-CL-01$ on \\MPT-LAB-DC-01 04/04/2017 11:42:13:369 NetpGetComputerObjectDn: Crack results: (Account already exists) DN = CN=BR-LAB-CL-01,CN=Computers,DC=lab,DC=tdm,DC=local 04/04/2017 11:42:13:369 NetpModifyComputerObjectInDs: Initial attribute values: 04/04/2017 11:42:13:369 DnsHostName = BR-LAB-CL-01.lab.tdm.local 04/04/2017 11:42:13:369 ServicePrincipalName = HOST/BR-LAB-CL-01.lab.tdm.local RestrictedKrbHost/BR-LAB-CL-01.lab.tdm.local HOST/BR-LAB-CL-01 RestrictedKrbHost/BR-LAB-CL-01 04/04/2017 11:42:13:369 NetpModifyComputerObjectInDs: Computer Object already exists in OU: 04/04/2017 11:42:13:369 DnsHostName = BR-LAB-CL-01.lab.tdm.local 04/04/2017 11:42:13:369 ServicePrincipalName = RestrictedKrbHost/BR-LAB-CL-01 HOST/BR-LAB-CL-01 RestrictedKrbHost/BR-LAB-CL-01.lab.tdm.local HOST/BR-LAB-CL-01.lab.tdm.local 04/04/2017 11:42:13:369 NetpModifyComputerObjectInDs: There are _NO_ modifications to do 04/04/2017 11:42:13:369 ldap_unbind status: 0x0 04/04/2017 11:42:13:369 NetpChangeMachineName: status of setting DnsHostName and SPN: 0x0


    DNS records:

    


    Shamir Jamu Gulamo

    Wednesday, May 3, 2017 7:40 AM
  • How can i make RODC discoverable from a generic DNS query? 

    Shamir Jamu Gulamo

    Thursday, May 4, 2017 7:06 AM
  • Hi Shamir,

    I had same issue, my client was getting authenticated from write able DC even when I provided correct DNS IP address of RODC to them.

    I then setup sites properly and it worked for me. I have listed few workarounds in this article. Check the solution section of this article.

    https://social.technet.microsoft.com/wiki/contents/articles/37722.read-only-domain-controller-rodc-unable-to-configure-password-caching.aspx

    Thank you,


    Saturday, May 6, 2017 7:42 AM
  • Hi Shamir,

    Was your issue resolved? If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.

    If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions. If no, please reply and tell us the current situation in order to provide further help.
    Best Regards,

    Wendy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, May 12, 2017 1:45 PM
    Moderator