Windows Forum

Ask something
Discussion Locked

can't join domain

0 helpful
8 replies

by nky008

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
My office need to setup a new lan of 40 PCs, when I install one "standard" machine and clone to the other machines, but those PCs can't join domain, why? when I join the workgroup with the "standard" PC, it's no problem.

8 replies

by ewgny

Have you used "sysprep" prior to cloning ?
the sids must be removed prior to cloning.

by ewgny

Then thats the problem
Just prior to cloning, empty event logs and defrag. Then run sysprep and clone. When the new PC is first started it will run the mini wizard asking you to name the PC and if you want to join to a domain, etc.
You can make an answer file for the wizard, either on floppy or within the image, but lets get you through the sysprep process first

by nky008

no, I used symantec GHOST 7.5 to make image of the standard "machine" and then cloned the image to other machine. I've not use "sysprep".

by cg it

when joining a domain, a SID is created which is unique and can NOT be duplicated. just creating an image of one machine and installing it in another will not create a Security Identifier for that machine. If you use the unattended [or attended doesn't matter] network install of the O/S including the answer file which has the user account authorized to join computers to the domain0/password/domain name will an "automatic" joining the domain happen.

by cg it

note: automatic joining is a misnomer in that instead of having to manually join the domain after the O/S is installed you basically create a batch file which is included in the answer file which will do the same thing as if you manually joined the domain.

by curlergirl

The reason you can't join the domain is that you haven't used sysprep. The sysprep step is necessary to create a new SID for each machine that you clone from the original image. If you haven't used sysprep, then every machine has the same SID. On a Windows domain, you can't have two machines with the same SID for security reasons, which is why it is not allowing your second and subsequent machines to join the domain.

Hope this helps!

by highlore

Problem is that you cannot join it as it already has been added to the domain. It is still an exact copy of the other system.

You need the following:

1) install your reference machine with all software, Without joining the domain.

2) create the ghost image (through network if possible).

3) ghost the image to the new system. do not reboot after ghosting. just exit to (pc)dos.

4) use the tool 'ghstwalk.exe' to change the name of the system and create a new SID.

5) reboot the system.

6) join it in the domain.

This discussion is closed to new replies.