Active Directory Join - Not Possible

[faugusto]

   Hi people,

   I have a ESXi 5.0 host, but I can't join this host into Active Directory. I always receive a message saying which the "specified domain does not exist or could not be contacted".

   Someone is expecting the same problem?

Thanks

[golddiggie]

Did you add the host into the DNS records (forward lookup) yet? You need to do that before yout try to add/bind it to your AD domain.

[faugusto]

Yes, I created the DNS entry and did a test creating the host into active directory too. But, without success..

Thanks

[peetz]

Have you tried manually creating a computer account for the host in your domain before doing the domain join?

- Andreas

[faugusto]

Hi Guys,

Yes, I tried creating the computer account in the active directory, creating an entry on host files pointing to DCs which reply from this domain but nothing works.

Any idea?

Thanks

Fernando

[golddiggie]

What are you using for the AD DC??

[cflath24]

Is there a firewall between your ESXi  host and the DC?

Also, there appears to be a bug with the correct ports being opened on the VMware firewall which will prevent you from being able to join a domain.  One resolution for this is to go in to the security profile and enable the "NFS Client" rule in the firewall properties.  Once you have joined the domain, you can disable that rule (and should).  I believe port 135 is the culprit.  You should also ensure that you have the "Active Directory All" rule enabled if you do not already.

[rickardnobel]

You should also make sure the system time on the ESXi and the DC are close to each others.

[faugusto]

Hi cflath24,

You tip was perfectly!!! NFS was the problem. But, now I can't add users into Permissions tab.

The domain isn't displayed in the "add users" screen, do you have any idea about it?

Thanks