Shulou(Shulou.com)06/02 Report--

Today, we simply summarize the prerequisites or preparatory work for the client to add the domain, so as to facilitate the novice or administrator to add the domain failure and troubleshooting, and so on. I hope it can help everyone.

one。 Network preparation: (ensure normal communication between client and domain control resolution and network)

DHCP mode: DHCP has specified the domain controller as the master / slave DNS, and the client IP address is DHCP without manually specifying the DNS address.

Static IP mode: the client IP address is manually specified. You need to manually configure the domain control primary DNS address.

If it is not the same network segment, ensure that the client IP address communicates normally with each port of the domain control, and the resolution is normal.

two。 Date and time settings:

Active Directory uses Kerberos for authentication. Kerberos requires domain members and domain controllers (DC) to have synchronization time. If the difference exceeds 5 minutes (the default), the client cannot access the domain resource for security reasons. Check the time configuration before joining the domain.

three。 Prepare to add domain permissions:

To join the computer to the domain you need, you need local administrator privileges on the computer

The credentials of the domain account that joined the computer to the domain have been enabled. For example: domain administrator account; account with delegate privileges (AD only)

(PS. If the administrator has not disabled this feature, up to 10 computers can be joined to the domain in authenticated user accounts, which can be modified or disabled)

IV. Windows version requirements:

Non-home version of the Windows operating system, or some Microsoft officials have mentioned that the version is not supported.

five。 The client itself requires:

Service status startup: TCP/IP NetBIOS Helper, Workstation, Remote Registry, Netlogon, Server service, etc.

If the system is cloned by Ghost, copy template image, or other means in the environment, please Sysprep and change the computer name in time, or you can use the Newsid tool to regenerate the SID

If there is a refined security client, you need to release port requirements such as domain control communication separately, or temporarily shut down the security software before adding the domain.

You should also pay attention to the client firewall settings.

For example, the network of the group or office environment is complex, if there are other problems, you can contact the network in time, security colleagues debug in parallel, or grab packet analysis, and so on.

Welcome to the official account of Wechat: Xiao Wen study Society.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.