[mdt] Domain Join Not Working

[angrycomputingteacher]

Hello,

 

For the past few weeks, I have been on and off trying to get MDT to automatically domain join. I've had anything but luck.

I have tried using multiple PowerShell scripts with no joy. Offline Domain Join does not seem to be working.

 

I would really appreciate your help.

 

I'm running:

Windows Server 2016

Windows 10 1703 Image

MDT 2013 Update 1

[snagrat]

Post your cs.ini settings as it will be set in there

[angrycomputingteacher]

CustomSettings.ini

 

[settings]Priority=DefaultProperties=MyCustomProperty[Default]OSInstall=YSkipCapture=NOSkipAdminPassword=YESSkipProductKey=YESSkipComputerBackup=NOSkipBitLocker=YESSkipComputerName=NOSkipUserData=YESSkipComputerBackup=YESSkipTimeZone=YESSkipLocaleSelection=YESJoinDomain=MCCLEAN.internalDomainAdmin=DomainJoinDomainAdminDomain=MCCLEANDomainAdminPassword=passwordUserID=AdministratorUserDomain=MCCLEANUserPassword=password

Edited July 21, 2017 by angrycomputingteacher

[asc]

In the past, I've had machines that won't domain join because the PC and server time are out of sync and so the crypto fails. So simple but took me forever to work it out!

[angrycomputingteacher]

Nit sure if this is my problem: I'm not setting any DNS in my task sequence. Should I be doing this?

[snagrat]

No DNS should all come from DHCP.

 

Your admin password doesn't have any characters in does it?

 

Mine has failed before when I had the £ sign due to keyboard layouts

[angrycomputingteacher]

Nope, only letters and numbers.

 

Also, our DNS servers are not specified on our Router(with DHCP).

[snagrat]

So is the machine getting dns servers specified?

 

Why isn't the domain controller doing DHCP and assigning DNS?

[angrycomputingteacher]

I just rather it is on the Router instead. How would I set the DNS server with MDT? I've tried with a batch script but it never ended up working.

[computer_expert]

Follow the bits about SLShare & cmtrace here (you can ignore the wsus stuff for now): http://www.edugeek.net/forums/o-s-deployment/185913-wsus-setup-mdt-reference-image.html#post1592073

 

Run a full deployment and once it has finished (or failed), look at the ZTIDomainJoin.log file and that should give you more info as to why it is failing. If your DHCP server isn't handing out the IP addresses of your DC(s) for DNS then I'd imagine that this is your issue.

 

You could use netsh within a 'run command line' step in the task sequence to set the DNS server (make sure you do it before the domain join step though)

Edited July 21, 2017 by computer_expert

[angrycomputingteacher]

OK. Thanks, @computer_expert. I'll try tomorrow and let you know how I get on.

[angrycomputingteacher]

@computer_expert I followed the post but did not install the System Center Toolkit or any of the WSUS stuff as we don't have either of those. Do I need them?

[computer_expert]

I'd recommend CMtrace (in the System Center Toolkit download) unless you want to make your eyes bleed reading the logs that MDT creates. CMtrace also highlights errors in red and warnings in yellow Edited July 22, 2017 by computer_expert

[angrycomputingteacher]

I've performed a re-image on a test machine but couldn't get the machine to accept any of my domain join credentials so I continued with the deployment and domain joined it afterwards.

 

How would I go about this? At first login to the machine after deployment, it sets my DNS and uses Offline Domain Join to request to join the domain. Would I use batch to do both the things?

[mdrabble]

Been a while since I've used MDT but On the task sequence for joining the domain, did you click on the test button?

 

I seem to remember an issue where clicking Test Credentials caused an issue - so try entering details and ignore the test credentials option

[angrycomputingteacher]

Been a while since I've used MDT but On the task sequence for joining the domain, did you click on the test button?

 

I seem to remember an issue where clicking Test Credentials caused an issue - so try entering details and ignore the test credentials option

Test button?

[mdrabble]

Got myself confused with SCCM - it was to do with Verify Credentials.

 

Have you looked that this? - https://community.spiceworks.com/topic/1945633-mdt-domain-join

[angrycomputingteacher]

Got myself confused with SCCM - it was to do with Verify Credentials.

 

Have you looked that this? - https://community.spiceworks.com/topic/1945633-mdt-domain-join

I've not but I'll check it out and see how I do.