The name or security ID (SID) of the domain specified is inconsistent with the trust information for that domain

[vmmax2479]

I have created template of 2003 server SP2. Each time i deploy VM from this teplate and joit to domain I get this message

The name or security ID (SID) of the domain specified is inconsistent with the trust information for that domain. Using newSID fixes the error.

Any way to get around this?

[vmroyale]

Hello.

You either need to perform the guest customization or use sysprep on the new VM.

Good Luck!

[vmmax2479]

if I would to perform the guest customization what do I need to change so the SID would change?

[vmroyale]

Running the guest customization basically runs sysprep for you. Part of this is generating a new SID.

Check out Chapter 14, Customizing Guest Operatting Systems in the Basic System Administration guide.

[Texiwill]

Hello,

Moved to Virtual Machine and Guest OS forum.

Best regards,

Edward L. Haletky

VMware Communities User Moderator

====

Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.

Blue Gears and SearchVMware Pro Blogs: http://www.astroarch.com/wiki/index.php/Blog_Roll

Top Virtualization Security Links: http://www.astroarch.com/wiki/index.php/Top_Virtualization_Security_Links

[SuryaVMware]

You still need sysprep for the guest you want to customize, in your case you need sysprep 2003.

Download and extract the files and place them under C:\Documents and Settings\All Users\Application Data\VMware\Sysprep\<apprproate GOS>\

Once you have the file in the correct dir. you should see the guest Customization option while cloning or deploying a template. This will take care of the SID problem.

-Surya

[vmmax2479]

place them on which PC, the new temlate that I building?

will I need to do this for every template that I create?

please provide more details

[SuryaVMware]

On the VC server. where the VC is running. not on the VI client machine.

-Surya

[vmmax2479]

thank you. got it

[vmmax2479]

One more question. How do i go about sysprep for windows 2008 32 and 64?

[khughes]

You can download sysprep from microsofts website - www.microsoft.com/downloads/ or I'm not sure if newsid works for win2008 or not. I always prefered newsid for all the sysprep work I did.

If you feel the question has been answered go ahead and mark it as such and award points to who you felt helped.

• Kyle

[Craig_Baltzer]

newsid breaks various bits (VSS support, etc.) on the 64 bit versions...

[khughes]

Thanks for the tidbit, we dont' run 64bit here yet so haven't run into that issue yet. Good to know for future reference though

• Kyle

[eVoodoo]

Just came across the same issue today. Found your thread in my Googling. I have never had this problem of needing a new SID, until today. I think I found what happened to me that started making this error show up.

Found a link that said: (http://blog.networkfoo.org/?p=131)

Issue/Goal:

You have spawned multiple computers/virtual machines/servers (VMs) using the same image without syspreping the image. _When you make one of these a domain controller _and try to join a second machine created using the same image you recieve the following error when trying to log on:

The system cannot log you on due to the following error:

The name or security ID (SID) of the domain specified is inconsistent with the trust information for that domain.

Please try again or consult your system administrator

This explains exactly what happened to me. I was running a test environment and used my template to spawn a DC and 2 other servers. I used another template to spawn 2 XP desktops, both of which joined the new test domain without needing a new SID. I figure I will now keep a seperate"made from scratch" template for rolling out test DC's. That way I won't need to change the SID on every new clone from my server template.

Hope this helps.