-
Title
"Error 0x5. Access is denied." Move Computer fails when Resource Updating. -
Description
You may recieve an access denied when trying to move a computer to the new domain - "Error 0x5. Access is denied" which is seen in the log of the move operation from within the RUM console. Example lines:
Joining computer HHSDTESTWS02 to domain <targetDomain>.
9/16/2010 2:44:44 PM 316 Removing net use connection to HHSDTESTWS02.
9/16/2010 2:44:44 PM 316 Error 0x5. Access is denied.
9/16/2010 2:44:44 PM 316 Move failed.Further logging, from the log file c:\windows\debug\netsetup.log found on the machine being updated, may show similar lines of the condition:
09/16 14:44:22 NetpDoDomainJoin
09/16 14:44:22 NetpMachineValidToJoin: 'HHSDTESTWS02'
09/16 14:44:22 NetpGetLsaPrimaryDomain: status: 0x0
09/16 14:44:22 NetpMachineValidToJoin: the specified machine is already joined to 'CORP_NT'!
09/16 14:44:22 NetpMachineValidToJoin: status: 0xa83
09/16 14:44:22 NetpJoinDomain
09/16 14:44:22 Machine: HHSDTESTWS02
09/16 14:44:22 Domain: AHH
09/16 14:44:22 MachineAccountOU: (NULL)
09/16 14:44:22 Account: (NULL)
09/16 14:44:22 Options: 0x23
09/16 14:44:22 OS Version: 5.1
09/16 14:44:22 Build number: 2600
09/16 14:44:22 ServicePack: Service Pack 3
09/16 14:44:22 NetpValidateName: checking to see if 'AHH' is valid as type 3 name
09/16 14:44:22 NetpCheckDomainNameIsValid [ Exists ] for 'AHH' returned 0x0
09/16 14:44:22 NetpValidateName: name 'AHH' is valid for type 3
09/16 14:44:22 NetpDsGetDcName: trying to find DC in domain 'AHH', flags: 0x1020
09/16 14:44:37 NetpDsGetDcName: failed to find a DC having account 'HHSDTESTWS02$': 0x525
09/16 14:44:37 NetpDsGetDcName: found DC '\\AHH03' in the specified domain
09/16 14:44:40 NetpJoinDomain: status of connecting to dc '\\AHH03': 0x0
09/16 14:44:40 NetpGetLsaPrimaryDomain: status: -
Cause
When passing credentials to Active directory the format is very specific. Under the "Domain Credentials Manager" it must be entered exactly as show for domains.
If fully qualified domains are used you may recieve "access denied" errors.
The following format is an example of right and wrong formats.
Wrong format:
Domain: domain1.mycompany.com
Username: domain1\user1
Password: *********
Correct format:
Domain: domain1
Username: domain1\user1
Password: *********
-
Resolution
Be sure to enter the fields with specific NETBIOS domains that are NOT fully qualified in the Credentials Manager.
Domain: domain1
Username: domain1\user1
Password: *********