locked
Domain Connection Error on SCE 2010 Install RRS feed

  • Question

  • I am attempting to install System Center Essentials 2010 and keep recieving the same error. Every time I attempt to install I receive an error before the install process begins. After clicking "install" a splash screen appears for a few seconds and a message box appears with the message, "Setup cannot continue because Essentials could not connect to the domain. Use Active Directory Domain Services to verify that a connection to the domain is possible and try again."

    I have tested my conenection to the domain via Active Directory Users and Computers, Active Directory Domains and Trusts, and Active Directory Sites and Services. I have also successfully been able to connect to the server via UNC path as well as recieved a valid IP address and DNS name when performing an NSLOOKUP from another machine.

    The server is 2003 SP2, Intel Xeon CPU E5420 with 4GB RAM Hyper-V guest with 20GB Hard Drive Space. I have attempted installs on other servers in our Domain which are currently in use. I have attempted installs on a Virtual Server 2008 Hyper-V guest, and 2 different Physical Server 2003 Hyper-V hosts. Each install attempt keeps returning the same error.

    The credentials we are using for the install have domain level rights to the Active Directory containers our organization is housed in, as well as Administrative rights on the Servers. However, we are not Full Domain Adminsistrators.

    Our domain functional level is Server 2003.

    Any troubleshooting suggestions will be greatly appreciated.

    Thank You,
    Chris

    • Edited by CConway1983 Friday, June 11, 2010 3:10 PM admin rights
    Friday, June 11, 2010 3:05 PM

Answers

  • In my case I was using DHCP to get an IP address for my server.  Changing to a fix address solved the "could not connect to a domain"-error for me. The message could be more verbose or descriptive, though...

     

    Bye

    Ali

    • Proposed as answer by KenNYC1 Saturday, November 27, 2010 6:52 PM
    • Marked as answer by Yog Li Thursday, July 21, 2011 10:53 AM
    Friday, September 17, 2010 4:14 PM
  • I had this problem, and solved it simply by logging on to the machine as a domain user (well, domain admin - but a domain user with local admin should work as well).  Before, I was logged on as local admin only.
    • Proposed as answer by Joe Cavanagh Friday, August 6, 2010 9:36 PM
    • Marked as answer by Yog Li Thursday, July 21, 2011 10:53 AM
    Friday, August 6, 2010 9:33 PM
  • We are running Bind DNS on our network and it was causing the error. We changed our DNS settings on the SCE server to the IP addresses of 2 of our domain controllers and it fixed the problem. This actually fixed several problems we had been having in newer Microsoft Applications and Operating Systems.
    • Marked as answer by Yog Li Thursday, July 21, 2011 10:53 AM
    Wednesday, September 15, 2010 9:22 PM

All replies

  • Hello,

    Is there any error message logged in the installation log?

    For more information about failures in installing or configuring Essentials 2010, refer to the error log files. For Windows Server 2003, the error log files are located in %USERPROFILE%\LOCAL SETTINGS\Application Data\SCE\LOGS.

    Thanks,


    Yog Li - MSFT
    Monday, June 14, 2010 10:21 AM
  • I don't see anything related to domain connection issues; this is all that is shown in the Logs each time I try an install:

    "Message Type  2: WinMain : Start ...
    Message Type  2: CBootStrapper::HandleUrl : Start ...
    Message Type  1: IsReadOnly: Checking if Automatic Update settings are ReadOnly
    Message Type  1: IsReadOnly: Automatic Update settings are NOT ReadOnly
    Message Type  2: CBootStrapper::LaunchSetup : Start ...
    Message Type  2: GetTempDirectory : Start ...
    Message Type  2: CopyFileList : Start ...
    Message Type  2: Copying Files from  : C:\SCE2010\setup\i386\
    Message Type  2: Copying Files to  : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE
    Message Type  2: CopyFileList : Finished ...
    Message Type  2: CopyFileList : Start ...
    Message Type  2: Copying Files from  : C:\SCE2010
    Message Type  2: Copying Files to  : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE
    Message Type  2: CopyFileList : Finished ...
    Message Type  2: CopyFileList : Start ...
    Message Type  2: Copying Files from  : C:\SCE2010\ProductDocumentation\\
    Message Type  2: Copying Files to  : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE
    Message Type  2: CopyFileList : Finished ...
    Message Type  2: CopyFileList : Start ...
    Message Type  2: Copying Files from  : C:\SCE2010\setup\i386\EN
    Message Type  2: Copying Files to  : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE\EN
    Message Type  2: CopyFileList : Finished ...
    Message Type  2: Wrote key used for the MU update check. Key : SOFTWARE\Microsoft\System Center Essentials\2.0\Setup\Bootstrapper
    Message Type  2: Wrote value used for the MU update check.  The this key is used by the MU to check our SKU. Value : Retail
    Message Type  1: SetupUpdate: Checking WUA version
    Message Type  1: Partial opting-in to MU
    Message Type  1: Partial opting-in to MU succeeded.
    Message Type  1: Started searching for new updates
    Message Type  1: update.IsSearchCompleted returned TRUE.
    Message Type  2: SCEWindowsUpdateProgressDialogFunc : WM_INITDIALOG.
    Message Type  1: Finished searching for new updates
    Message Type  1: Updates available:  : 0
    Message Type  2: CBootStrapper::LaunchSetup : Setup update was successful
    Message Type  2: Launching EXE : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE\setup.exe
    Message Type  2: CBootStrapperBase::LaunchExeAndWait : Starting...
    Message Type  2: CBootStrapperBase::LaunchExeAndWait : Finished...
    Message Type  2: CommonWinMain : Main returned success"

    Monday, June 14, 2010 1:21 PM
  • Hello,

    That's really a strange issue. I cannot find any related error message.

    To resolve this issue, you may contact CSS to start a case. 

    Online Assisted Support Options
    http://support.microsoft.com/select/default.aspx?target=assistance&c1=508&GSSProdSelMore508

    Microsoft System Center Essentials 2007
    https://support.microsoft.com/oas/default.aspx?&c1=508&gprid=12684

    Hope it helps,

     


    Yog Li - MSFT
    Wednesday, June 16, 2010 10:26 AM
  • Hello,
    did you have any progress on this ?

    I've exactly the same problem, trying to upgrade (inplace) a perfectly working Sce2007 Sp1 memeber server.

    In the SCESetupWizard.log i see:

    12:51:24:We could not verify two way trust.
    12:53:42:We cannot Contact and/or interact with Active Directory.

    and later:

    01:11:03:Application Ended: CurrentUserForestNotInTwoWayTrustRelationshipWithComputerForest

    But AD is perfectly working (otherwise my 300+ users would complain ..), I'm using the same DomainAdmin+LocalAdmin account I've used to installa Sce2007 in the past.
    Things to note in my setup:

    • The domain is a child domain in a more complicated forest tree
    • The NetBios domain name is DIFFERENT than the left part of the domain FQDN
    • I've no rights in the Forest Root, but full rights in the loacl domain

    Basically it detects correctly everything (previous Sce2007 Setup, SQL and versions, domain ...) but won't work.

    Any suggestions ?

    Bye, Claudio


    MCSA, MCSE, MCT
    Wednesday, July 7, 2010 11:42 AM
  • I had this problem, and solved it simply by logging on to the machine as a domain user (well, domain admin - but a domain user with local admin should work as well).  Before, I was logged on as local admin only.
    • Proposed as answer by Joe Cavanagh Friday, August 6, 2010 9:36 PM
    • Marked as answer by Yog Li Thursday, July 21, 2011 10:53 AM
    Friday, August 6, 2010 9:33 PM
  • We opened a case with Microsoft [REG:110072832501507], but for the moment no progress at all.


    If we get a solution I'll post it ...

    Bye

    Claudio


    MCSA, MCSE, MCT
    Monday, August 9, 2010 12:37 PM
  • It's not our case, we are already using a Domain Admin account.

    Cheers

    Claudio


    MCSA, MCSE, MCT
    Monday, August 9, 2010 12:39 PM
  • We are running Bind DNS on our network and it was causing the error. We changed our DNS settings on the SCE server to the IP addresses of 2 of our domain controllers and it fixed the problem. This actually fixed several problems we had been having in newer Microsoft Applications and Operating Systems.
    • Marked as answer by Yog Li Thursday, July 21, 2011 10:53 AM
    Wednesday, September 15, 2010 9:22 PM
  • In my case I was using DHCP to get an IP address for my server.  Changing to a fix address solved the "could not connect to a domain"-error for me. The message could be more verbose or descriptive, though...

     

    Bye

    Ali

    • Proposed as answer by KenNYC1 Saturday, November 27, 2010 6:52 PM
    • Marked as answer by Yog Li Thursday, July 21, 2011 10:53 AM
    Friday, September 17, 2010 4:14 PM
  • I solved the problem by switching windows firewall off.
    Friday, October 14, 2011 12:40 PM
  • Hi All,

    Just recently I tried installing SCE on a windows server 2008 R2, and I was having the same problem with CluadioG64, having the same entries in my logs:

    ...We could not verify two way trust.
    ...We cannot Contact and/or interact with Active Directory.


    ...was this issue resolved already? thanks...

    Wednesday, December 7, 2011 1:56 PM
  • Hi all, This is rather strange and I had no time to investigate it but I managed to install SCE 2010 in a test environment similar to my client's environment. They are in a child domain, the administrator has domain admin credentials but no enterprise admin credentials. What I did in my test environment were as follows: 1. Log-in as enterprise admin to check if there was connectivity to the parent domain from the child domain - successful 2. Logged out and logged in again as domain admin for the child domain 3. Installed SCE 2010 - successful I'm still asking for an enterprise admin to install SCE 2010 in the production environment and hopefully this gets done. I'll keep you posted if everything goes well...Thanks...
    Sunday, December 18, 2011 6:55 AM
  • Hi,

    in my case it was "resolved" opening the firewalls that was blocking communication between the SCE server in the child domain (totally contained in a dedicated site, where we were running with full privilege) and the forest root.

    It appears that even if you are domain admin in a child domain, SCE during setup tries to contact directly the forest root domain controllers, which in our case was not permitted (only local DC's could connect to corporate-root DCs).

    Once the communication was opened, setup went fine.

    When setup was finished we could revert back to the corporate firewall defaults, since no communication will be tried toward forest roots during normal SCE operations, but if you need to add components (or even install a SCE Service Pack - if any) , you'll have to do it again.

    Bye,

    Claudio


    MCSA, MCSE, MCT
    • Proposed as answer by mhykgyver Thursday, December 22, 2011 8:45 AM
    Tuesday, December 20, 2011 10:45 AM
  • Hi Claudio,

    Thanks for the post, I'll be asking the network admin then to create a policy in there PIX and ISA just for this SCE server and hopefully it works...Thanks again...

    Wednesday, December 21, 2011 8:11 AM
  • Hi Claudio,

    A most wonderful day to you.

    Everything went well after the firewall was opened for the SCE server and my client is very very happy considering the fact that he wanted this tool very badly for support.  All my deliverables were finally delivered. Coming from a fellow professional and MCT, I can't thank you enough for the great help and hopefully I can return the favor someday. 



    In Richness,

    Michael
    MCP/MCT/MCDST/MCSA: Messaging+Security/MCSE:Messaging+Security/MCTS:WSS 3.0+MOSS 2007+Vista/ MCITP:Enterprise Technician+Server Administrator+Enterprise Administrator/CEI/CEH/Linux+/Security+/ Network+

    Thursday, December 22, 2011 8:47 AM