Windows 7 or Windows Server 2008 R2 domain join displays error "Changing the Primary Domain DNS name of this computer to "" failed...."

Hi,
Windows 7 or Windows Server 2008 R2 domain join displays error "Changing the Primary Domain DNS name of this computer to "" failed...."
DC:windows Server 2008 R2
Domain functional level:Windows Server 2003
When Winxp join domain, have no this error message.
I checked http://support.microsoft.com/kb/2018583?wa=wsignin1.0 does't work.
There have 3 suggestion in this article:
1.The "Disable NetBIOS over TCP/IP" checkbox has been disabled in the IPv4 properties of the computer being joined.
Doesnt's work.
2.Connectivity over UDP port 137 is blocked between client and the helper DC servicing the join operation in the target domain.
On my DC, I run netstat -an, reslut as below:
 UDP    192.168.20.3:137       *:*
3.The TCP/IPv4 protocol has been disabled so that the client being joined or the DC in the destination domain targeted by the LDAP BIND is running TCP/IPv6 only.
We are not using IPV6.
This server recently updated from Windows Server 2003 to Windows Server 2008 R2. Before upgrade, when Win7 and Win2008 join this domain, also have the same error message.
Please help to check this issue.
Thank you very much.
BR
Guo YingHui 

Hi Guo Ying,
I have faced this critical error which makes over-writes the host names in the domain when you join.
For example: Already you had a host name called as PC.domain.com in the domain.com Domain.
When you try to add the another host name called as PC in the domain.com Domain, it doesn't give you the duplicate name error on the network it does over-write the existing host name called as PC.domain.com & it will add the new host name into the domain.
Host name which got over-written will get removed from the domain. I faced this issue in my project. My DPM host name got removed from the Domain & new host name got joined into the domain which halted my backups for one day.
Final Resolution is as follows:
You need to start the dns console on the DC & drop down the domain name.
Select the _msdcs when you click on _msdcs it will show the Name Server's list on the right hand side.
You need to add the Domain Naming Master under the _msdcs or add all the domain controllers which you had.
After you add the Name server's try joining the PC OR Laptop to the domain which is successfully joins it.
Regards
Anand S
Thanks & Regards Anand Sunka MCSA+CCNA+MCTS

Similar Messages

  • I am unable to upgrade to Mavericks from Snow Leopard 10.6.8 on a MacBook (Model 4,1)(Late 2008). It show an error "OS X Maveriscks cannot be installed on this computer" What shall I do ?

    It show an error "OS X Maveriscks cannot be installed on this computer" What shall I do ?

    MacBook (13-inch Aluminum, Late 2008), (13-inch, Early 2009 or later)
    From here >  OS X Mavericks: System Requirements

  • Joining Windows Server 2008 to Windows Small Business Server 2008

    We have Windows Small Business Server 2008 and it came with a copy of Windows Server 2008 and MS SQL. (A packeged deal from Microsoft).
    Long ago I installed Windows Server 2008 and MS SQL on a computer and joined it with SBS2K8.
    My Windows Small Business Server 2008 crashed and I had to redo it and now I can't get the Windows Server 2008 to join it.
    We are not using the computers for a domain or anything but they are on our network with regular IP addresses.
    The Windows 2008 Server uses the SBS2K8's IP address for it's DNS. The DNS for the  SBS2K8 is 127.0.0.1
    We are using Windows Server 2008 for SolidEdge and MS SQL has to authenticate against the SBS2K8 to run.
    Should I hook both computers up to a switch for their own network to get them talking to each other?
    Do I have to put the Windows 2008 Server name in the SBS2K8 for a user?
    Please advise and thanks.

    Hi:
    Read the warning at the end of this and be sure you follow it.
    Can you explain further this part:  We are not using the computers for a domain or anything but they are on our network with regular IP addresses.
    I ask because SBS MUST be a domain controller or it will not work.  Right click My Computer -  Properties - Computer name tab and let us know if the SBS is "domain" or "workgroup".
    What I expect is the SBS is a Domain, and when you reinstalled it it becomes a new domain, even if it has the same name.  The Server was a member server in the old domain, so the solution to this is to change the Server 2008 with SQL from domain to
    workgroup in the same place as above, then after it restarts rejoin it to the SBS domain by changing it once again to Domain.
    Both the SBS and the Server 2008 should have static ip addresses and the SBS should be the DHCP server for the rest of the network, not your router/firewall.
    Warning:  You MUST check in control panel - users on the Server 2008 to verify you have a local administrative level account and you are positive you know the password for that account.  When the server restarts after being placed into workgroup
    mode the domain administrator will no longer be able to logon to the Server 2008.
    Larry Struckmeyer[SBS-MVP] If your question is answered, please mark the response as the answer so that others can benefit.

  • Warning: Palm OS Treos and Windows Small Business Server 2008

    If you use a Treo smartphone with the Palm operating system, beware:  it does not work with Microsoft Windows Small Business Server 2008.
    Palm acknowledges this failure and has no intention of fixing it. 
    There are at least two problems:
    (1) You must turn off all email security on the Exchange mail server to sync with Treos.
    (2) AutoSync locks up the Palm each time it occurs, and must be turned off.
    Here's the transcript of my chat w/tech support. After this, I spent a few hours on the phone and got the same answers.
    [12:35 AM] Gary says: Hello.
    [12:35 AM] Handoff connection active (1/5140).
    [12:35 AM] x says: Hi. Please see the question sent earlier.
    [12:36 AM] Gary says: Could you please be more specific about the issue?
    [12:37 AM] x says: Our Palms will not talk to Exchange Server 2007 unless all its security
    features are turned off. This is a problem with Palm/VersaMail. When will it be corrected?
    [12:38 AM] Gary says: Yes, that is true. I am sorry for the inconvenience this may have caused.
    [12:38 AM] Gary says: I am very sorry to inform you that currently we do not have any information on this.
    [12:39 AM] x says: Apology accepted and appreciated. But when will this be fixed?
    [12:40 AM] Gary says: Unfortunately we do not have any sort of update on this. I suggest you to post the
    feedback in the Palm Website.
    [12:41 AM] x says: Okay, next question:  Every AutoSync locks up the Palm, so we have to turn
    AutoSync off. Do you intend to rectify this problem?
    [12:42 AM] Gary says: I understand your concern. Is it happening with all the Palm devices?
    [12:42 AM] x says: Yes.
    [12:43 AM] Gary says: Do you receive any error message before locking up the Treo?
    [12:43 AM] x says: No.
    [12:46 AM] Gary says: Okay, as this happening with all the devices to me it looks like the issue should be
    diagnosed closely to find the root cause. Was this happening with the Exchange Sever 2003?
    [12:46 AM] x says: No
    [12:46 AM] Gary says: So, the AutoSync feature is Locking the device from the day you upgraded to the
    Exchange Sever 2007.
    [12:46 AM] Gary says: Am I correct?
    [12:47 AM] x says: yes.
    [12:48 AM] Gary says: Okay, as this is the issue related to the sync with the Exchange Server 2007 and the
    AutoSync to find out the root cause I will escalate this issue to our escalation channel which is our Voice
    Support Team.
    [12:48 AM] Gary says:
    I will provide you all the information and guide you in the correct direction to address this issue.
    [12:48 AM] Gary says:
    I suggest you to get in touch with the Voice Support and I am sure they will fix the issue.
    [12:49 AM] Gary says:
    I will provide you a Service Request, when contacting the Voice Support, provide this Service Request Id and you will get a free Technical Support.
    [12:51 AM] Gary says: Please provide me your Last name, First name, complete address, phone number,Email address, date and place of purchase of device and serial number of the device to create a Service Request Number.
    [12:51 AM] x says: Of course I provided all this when I logged in, but here it is again:....
    [12:54 AM] Gary says: Thank you for providing all the information.I need 5 minutes to register the device and create a Service Request.
    [12:55 AM] x says: Thanks for your help, and confirmation of the incomprehensible failure to support Exchange Server 2007.  We're this close to dumping these things if this is the kind of tech support Palm intends to provide.
    [1:00 AM] Gary says: Thanks for staying on hold: I am sorry for the delay. I can understand the inconvenience you are facing.
    [1:01 AM] Gary says: Based on the information you provided, I created a service request for you in our database.  The Service Request number is : 1-51558238041
    [1:01 AM] x says: Will I get an email?
    [1:01 AM] Gary says: Using this service request number, you need to contact our Voice Support department.  Voice Support Department number is 877-426-3777. Voice support will be available from  5:00AM to 9:00PM (PST) on weekdays and from 8am - 5pm PST on weekends.Please note down the above given Service Request Number and Voice Support Number or else you will lose this information once the chat session is closed.
    [1:02 AM] Gary says: Yes, I will email this chat session to you.
    [1:02 AM] Gary says: Is there anything else I can assist you with today?
    Post relates to: Treo 755p (Sprint)

    The problem is the default security profile isn't compatible. You can go into the Power shell command line and remove the default activesync mailbox policy.
    Post relates to: None

  • Java for PI 7.1 EHP1 in Windows and SQL Server 2008

    Hi Gurus
    I try to install PI 7.1 EHP1 in Windows and SQL Server 2008. The questions is :
    What version of java is the correct for this installation???
    And where i can download it??
    Thanks and advance!!!

    Hi Aaron,
    The version for PI 7.1 is 1.5, instead of the 1.4.2 of 7.0/3.0.
    Anyway, for VM settings, you should refer to SAP JVM, which
    is used for the PI 7.11.
    Hope it helps!
    Regards,
    Caio Cagnani

  • Unable to execute embedded application windows azure in Windows Vista and Server 2008

    I'm having problems to install the backup application Azure.
    In Windows Vista and Server 2008 .
    I segudo instructions :
    http://support.microsoft.com/es-es/kb/2934202
    But I still can not install the agent.
    When I run it , it is decompressed and then a window with an error.
    Anyone else happens ?

    The message that Windows creates me exactly is:
    Unable to execute the embedded application to complete the installation.
    After being , checking this:
    Microsoft .NET Framework 4
    Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package MFC Security Update
    Windows PowerShell 3.0 (my machine is 2.0)
    Microsoft.NET Framework 4 Client Profile (installed)
    Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (installed)
    The announcement of support Server 2008 64bit versions .
    https://msdn.microsoft.com/es-es/library/azure/jj573031.aspx#BKMK_testsrv
    I realize that my machine is 32bit Server 2008 Standard
    http://azure.microsoft.com/blog/2014/10/06/announcing-support-for-backup-of-windows-server-2008-with-azure-backup/
    It occurred to me descompri the MARSAgentInstaller package.
    Run the application, but being 32bit my system , I think the Agent application is 64bit Copies Azure .
    For this throws an error commenting same .

  • I am not able to download an ebook to my PC. I have windows 7 x64. I get a "Check Activation" error. The question is that I have 2 Adobe users. I have the ebooks associated to one of them but every time I download Adobe Digital Editions, independently fro

    I am not able to download an ebook to my PC. I have windows 7 x64. I get a "Check Activation" error. The question is that I have 2 Adobe users. I have the ebooks associated to one of them but every time I download Adobe Digital Editions, independently from what user I download it, it always create the Adobe Digital Editions associated to the worng user. If I try to delete the Authoritation it says that it is nor posible and recommneds me to try later, but I never get it.

    This is a user-to-user forum, and although Adobe staff make occasional appearances here, there is no guarantee that you will get any "officila" Adobe feedback.
    If you have difficulties to install the online installer from http://get.adobe.com/flashplayer/, then download the offline installer http://fpdownload.macromedia.com/get/flashplayer/current/install_flash_player_ax.exe; save it to disk, then run it after closing all browser windows.

  • When to install InDesign it says that I am using an operating systam that InDesign nolonger suppor. It is windows XP What shuld I do as I can not change the operating system?

    when to install InDesign it says that I am using an operating systam that InDesign nolonger suppor. It is windows XP What shuld I do as I can not change the operating system?

    Please answer the question: Will you need to share files with people who have current versions of InDesign?

  • Changing the internal domain to a subdomain -- Help!

    Hello, so I have a huge project coming up and i was wondering if someone had some experience on this that could give me some advice.
    So,  started working on this company that has an internal domain called.. lets say abc.com  and external alphabetaghama.org   ..  the problem we have is that we cannot get certs for our internal domain for public access like our exchange
    server fqdn for example is exchange.abc.com ... Someone else owns abc.com which prompted my new boss to fix this and now i have a project to change our internal domain to match our external but I know that the best practice is to have a
    subdomain as the internal domain and I think that's the route my boss wants to go with..  which brings me to my question.
    What will I have to do to get this accomplished... our external domain name is really just a forward zone and i dont have a forest so does that mean that i will have to build a alphabetaghama.org forest and add a subdomain like corp.alphabetaghama.org 
    for our internal and then migrate everything over? 
    We currently have exchange 2007 with 2008R2 DC's..  our new domain would be on 2012R2 DCs with the same exchange server..
    Sorry if something doesn't make sense, I'm a little new to a major project like this...

    Hi,
    This really depends on the requirements. As the Domain restructure is a huge project, we'd better have some experts with good experenses at hand. And if the problem (to get public access) is solved,  it is recommended to have a good consideration
    if the rebuilding is needed.
    Regarding the internal domain name, maybe you want to have a look into the below MS article:
    How Domain Rename Works
    http://technet.microsoft.com/en-us/library/cc738208(v=WS.10).aspx
    For your reference:
    ADMT Guide: Migrating and Restructuring Active Directory Domains
    http://technet.microsoft.com/en-us/library/cc974332(v=WS.10).aspx
    One thing to mind is ADMT tool may cannot
    be installed on a Windows Server 2012 DC, so please make sure in the target domain we have a Windows Server 2008 DC to be the ADMT server.
    ADMT 3.2 and PES 3.1 installation errors on Windows Server 2012
    http://support.microsoft.com/kb/2753560
    Hope this may help
    Best regards
    Michael
    If you have any feedback on our support, please click
    here.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Getting Error The trust relationship between the primary domain and the trusted domain failed in SharePoint 2010

    Hi,
    SharePoint 2010 Backup has been taken from production and restored through Semantic Tool in one of the server.The wepapplication of which the backup was taken is working fine.
    But the problem is that the SharePoint is not working correctly.We cannot create any new webapplication ,cannot navigate to the ServiceApplications.aspx page it shows error.Even the Search and UserProfile Services of the existing Web Application is not working.Checking
    the SharePoint Logs I found out the below exception
    11/30/2011 12:14:53.78  WebAnalyticsService.exe (0x06D4)         0x2D24 SharePoint Foundation          Database                     
     8u1d High     Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15' 
    11/30/2011 12:14:53.78  WebAnalyticsService.exe (0x06D4)         0x2D24 SharePoint Foundation          Topology                     
     2myf Medium   Enabling the configuration filesystem and memory caches. 
    11/30/2011 12:14:53.79  WebAnalyticsService.exe (0x06D4)         0x12AC SharePoint Foundation          Database                     
     8u1d High     Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15' 
    11/30/2011 12:14:53.79  WebAnalyticsService.exe (0x06D4)         0x12AC SharePoint Foundation          Topology                     
     2myf Medium   Enabling the configuration filesystem and memory caches. 
    11/30/2011 12:14:55.54  mssearch.exe (0x0864)                    0x2B24 SharePoint Server Search       Propagation Manager          
     fo2s Medium   [3b3-c-0 An] aborting all propagation tasks and propagation-owned transactions after waiting 300 seconds (0 indexes)  [indexpropagator.cxx:1607]  d:\office\source\search\native\ytrip\tripoli\propagation\indexpropagator.cxx 
    11/30/2011 12:14:55.99  OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Topology                     
     75dz High     The SPPersistedObject with
    Name User Profile Service Application, Id 9577a6aa-33ec-498e-b198-56651b53bf27, Parent 13e1ef7d-40c2-4bcb-906c-a080866ca9bd failed to initialize with the following error: System.SystemException: The trust relationship between the primary domain and the trusted
    domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids, Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection
    sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()    
    at Microsoft.SharePoint.Administration.SPAcl`1.Add(String princip... 
    11/30/2011 12:14:55.99* OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Topology                     
     75dz High     ...alName, String displayName, Byte[] securityIdentifier, T grantRightsMask, T denyRightsMask)     at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)    
    at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider
    persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state) 
    11/30/2011 12:14:56.00  OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Topology                     
     8xqx High     Exception in RefreshCache. Exception message :The trust relationship between the primary domain and the trusted domain failed.   
    11/30/2011 12:14:56.00  OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Timer                        
     2n2p Monitorable The following error occured while trying to initialize the timer: System.SystemException: The trust relationship between the primary domain and the trusted domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection
    sourceSids, Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type
    targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()     at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, Byte[] securityIdentifier, T grantRightsMask,
    T denyRightsMask)     at Microsoft.SharePoint.Administrati... 
    11/30/2011 12:14:56.00* OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Timer                        
     2n2p Monitorable ...on.SPAcl`1..ctor(String persistedAcl)     at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization()    
    at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid
    id, Guid parentId, Guid type, String name, SPObjectStatus status, Byte[] versionBuffer, String xml)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(SqlDataReader dr)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.RefreshCache(Int64
    currentVe...
    Please guide me on the above issue ,this will be of great help
    Thanks.

    I have same error. Verified for trust , ports , cleaned up cache.. nothing has helped. 
    The problem is caused by User profile Synch Service:
    UserProfileProperty_WCFLogging :: ProfilePropertyService.GetProfileProperties Exception: System.SystemException:
    The trust relationship between the primary domain and the trusted domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids,
    Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type
    targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()     at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, SPIdentifierType identifierType, Byte[]
    identifier, T grantRightsMask, T denyRigh...        
    08/23/2014 13:00:20.96*        w3wp.exe (0x2204)                      
            0x293C        SharePoint Portal Server              User Profiles                
            eh0u        Unexpected        ...tsMask)     at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)    
    at Microsoft.Office.Server.Administration.UserProfileApplication.get_SerializedAdministratorAcl()     at Microsoft.Office.Server.Administration.UserProfileApplication.GetProperties()     at Microsoft.Office.Server.UserProfiles.ProfilePropertyService.GetProfileProperties()
    Please let me know if you any solution found for this?
    Regards,
    Kunal  

  • How to change the Credential domain Value in XML gateway?

    How to change the Credential domain Value in XML gateway?
    configured the XML Gateway trading partner . It is generating the header as given below. but need to change the Credential domain to DUNS.
    <Header>
    <From>
    <Credential domain="olgridap1.lan">
      <Identity>53369415-cxml</Identity>
    </Credential>
    </From>
    Desired XML header
    <Header>
    <From>
    <Credential domain="DUNS">
      <Identity>53369415-cxml</Identity>
    </Credential>
    </From>

    You might want to check WLP 10.3 & deployment plan & log4j.xml for a similar topic.

  • Ical won't sync with yahoo calendar. Get error....There was an unexpected error with the request (domain CalDAVErrorDomain / error 1 / description 'The collection at "/dav/xyx/Inbox/" is not an inbox.').

    Hello, I get the below error when I start iCal and it tries to sync with my Yahoo Calendar. Any thoughts?
    There was an unexpected error with the request (domain CalDAVErrorDomain / error 1 / description 'The collection at "/dav/xyx/Inbox/" is not an inbox.').

    I am having same problem - I've added events to Ical and it's not updating in my Yahoo calendar. Getting this message: There was an unexpected error with the request (domain CalDAVErrorDomain / error 1 / description 'The collection at "/dav/mcarthur_c/Inbox/" is not an inbox.').

  • How to change the primary outgoing mail server in iphone

    I am trying to change the primary outgoing mail server from Yahoo to another mail which is my internet provider. I do not know the steps to complete this in my iphone thanks

    If you have more than one email account on your phone, you can change the default account under Settings>Mail, Contacts, Calendar>Default Account. Note that this setting does not appear unless you have more than one account on your phone. So, you'll need to add the email account from your ISP under Settings>Mail, Contacts, Calendars>Add New Account if you have not already done so.

  • Does installation of Server.app 3.1.1 on Mavericks change the OS Name?

    Does installation of Server.app 3.1.1 on Mavericks change the OS Name as seen in sw_vers?

    littlejon1 wrote:
    Ah. Now, we're getting somewhere! That's more like what I'm looking for. Thanks.
    Suggestion, if somebody hasn't already tested this: Might want to follow the removal instructions for Server.app (see Help > Removing Serfver) and confirm whether that .ServerSetupDone file does or does not continue to exist, before you bet on that as the detection path.

  • PKI SCCM Client Certificate Template not viewable by Windows 7 and Server 2008 workgroup machines.

    Hello everyone,
    I’m having issues with workgroup computers, not domain systems when I request a certificate.
    It’s extremely weird. It has something to do with Windows 7 and Windows 2008 machines. In 2003 server I can request a certificate manually with certutil and it see the certificate template. I copy over the exact command
    on windows 7 and it can’t see the certificate template.
    I have the following configuration:
    CA Enterprise
    I have created the SCCM Client Certificate
    I have created the SCCM Web Server Certificate
    I have created the SCCM Distribution Point Certificate
    GPO is configured
    SCCM 2012 R2 CU2 configured to do HTTP and HTTPS
    Installed SCCM Client Certificate
    Installed SCCM Web Server Certificate
    Installed Distribution Point Certificate
    Deployed to a domain computer good on PKI
    Workgroup Computers:
    I’m having issues with deploying certificates
    Windows 7 –
    (ERROR) not successful
    Windows Server 2008 R2 –
    (ERROR) not successful
    Windows Server 2003 - successful
    Windows XP – successful
    How I’m getting the certs for the clients is by utilizing the following scripts from this URL.
    http://www.ithierarchy.com/ITH/node/48
    I did find a couple of errors in the code, but if it’s working on my Server 2003, then it should work on the others. Windows 7 and Windows 2008 R2 seem to have the same issue. The error I’m getting is the following:
    Command line requesting the cert ---- CertReq –new –f testcomputer.home.pvt.inf c:\client\testcomputer.home.pvt.req
    Error --- Template not found.
    SCCMClientCertificate (this is my template)

    Just to give an update on what’s happening with this. I found out this format is unsupported by MS with Windows Vista and newer OS’s.
    Instead you must utilize two other additional roles on the CA to have this work. The caviate is, I’m down to the testing and it’s not working as in the document. I have MS Support
    working with me to resolve this issue since it was written by MSFT.
    http://blogs.technet.com/b/askds/archive/2010/05/25/enabling-cep-and-ces-for-enrolling-non-domain-joined-computers-for-certificates.aspx
    and use this doc for similar workgroup computers for rolling out certs. This was written for RT devices, however, it should work once I get to that point.
    http://blogs.technet.com/b/pki/archive/2012/12/11/certificate-for-winrt-devices-and-non-domain-member-devices.aspx

Maybe you are looking for

  • HT4623 I can't activate my iphone

    I can't activate my iphone 3G there are problem I think I don't know what to do?

  • Why did I have to reset safari in order to be able to see an updated page in third party browsers?

    Why would Safari's Web Cache be used by Other Third Party Browsers (Chrome, Opera, Camino) under OS X 10.6.8 (Safari 5.1), This is functionality that needs to be stripped from OS X or at least selectable so that it can be turned off for web design pr

  • Negative sign to change to prefix

    dear gurus please let me know how to change the negative sign to prefix in alv report. ( i.e transcode GRR2=>formating =>report layout => language dependent => debit/credit sign [+/-] ). Regards Vijayendran S

  • Java number formats?

    Hi. I am writing a program which contains a simple division code. The operation divides a word's frequency in a file by the number of words in that file. This is a code strip wordCount = wordsInFile(file2); //number of words in file is obtained from

  • Help me with my Zen Micro plea

    Hi i posted a request for help about an hour ago,im dissapointed no has helped me out yet!Please could some reply asap,many thanx Adam