Error 0x57 may be reported when moving a computer within the same forest using Windows Server 2012 R2 Domain Controller (DC):
RUM log:
17/11/2015 15:59:48 2252 Joining computer to domain domain.local using account domain\administrateur from target domain.
17/11/2015 15:59:48 2252 Error 0x57. Parameter is incorrect.
17/11/2015 15:59:48 2252 Move failed.
11/18/2015 13:52:41:944 unicodePwd =
11/18/2015 13:52:41:959 NetpMapGetLdapExtendedError: Parsed [0x21c7] from server extended error string: 000021C7: AtrErr: DSID-03200BA6, #1:
0: 000021C7: DSID-03200BA6, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 90303 (servicePrincipalName)
11/18/2015 13:52:41:959 NetpModifyComputerObjectInDs: ldap_add_s failed: 0x13 0x57
11/18/2015 13:52:41:959 NetpCreateComputerObjectInDs: NetpModifyComputerObjectInDs failed: 0x57
11/18/2015 13:52:41:959 NetpProvisionComputerAccount: LDAP creation failed: 0x57
11/18/2015 13:52:41:959 NetpProvisionComputerAccount: Cannot retry downlevel, specifying OU is not supported
11/18/2015 13:52:41:959 ldap_unbind status: 0x0
11/18/2015 13:52:41:959 NetpJoinDomainOnDs: Function exits with status of: 0x57
The issue does not occur for inter-forest migration or when Windows Server 2012 (non R2) or lower is involved. There will be no error in the RUM UI if no target OU has been specified. However, the error will still persist in the netsetup.log.
The same error can be reproduced using native tools, for example with:
netdom move /ou: