Problem adding DC to domain

[boon84]

Hello there,

after hours of searching the web, i'll try here.

Im a student of bioinformatics, and work at the university. Currently im trying to setup two windows server 2008 domain controllers.

With the first one everything worked fine, but when i try to add the second server to the domain as an domaincontroller, i become following error at the end of the dcpromo wizard and the beginning of the setup:

 

The computer could not join the domain (domain_name).

"No mapping between account names and security ID's was done"

 

Some information for you:

Theres a hardware firewall configured and an dns server from the university net. Both DC's have update rights on this dns server. So the DNS role from server 2008 is not installed.

Internet works fine (via proxy), updates installed, i can ping all computers, that are still in a workgroup, i even can add client computers (Windows XP Pro) to the domain, and it works, only the second domaincontroller doesnt ....:confused:

 

What i tried:

- dcdiag of first dc shows no errors, nslookup ok

- delegation is "trusted" for first dc and set to Kerberos only (the default)

- another domain admin account

- also installed dns server role on both servers, took them from hardware firewall, and connected them directly, with changed ip settings, same error (first dc preferred dns server: local; second dc preferred dns server (configured before start of dcpromo.exe): ip of first dc)

- languages are the same -->english

- modified some security options in the domain policy on first dc (network access and so on); some entries should be enabled on deafult on a dc according to the explanation, but they where not

- couldnt find additional information in dcpromoui (Exception HRESULT: 0x80070534)

- and so on :o

- found this post best fitting to my problem, but dont have a credit card ^^:

 

I'm getting the error "No mapping between account names and security ID's was done" when attempting to join a W2k server to a w2k domain : mapping, account, between, security, names

 

---> great, where should i know the settings from? cant pay 299 $ for microsoft support ;)

 

I really dont know what to do next, maybe someone of you has an idea,

 

if you need any additional information, ill send it to you as soon as possible

 

thx very much in advance.

 

Your boon :rolleyes:

[boon84]

Problem solved:

 

- New Installation of first dc with dns server role, not using external dns

- File replication service was not started by default after dcpromo on first dc