|
| 1 | +--- |
| 2 | +title: Domain join error code 0x0000232A |
| 3 | +description: Provides troubleshooting steps for resolving error code 0x0000232A when you join a workgroup computer to a domain. |
| 4 | +ms.date: 04/25/2025 |
| 5 | +manager: dcscontentpm |
| 6 | +audience: itpro |
| 7 | +ms.topic: troubleshooting |
| 8 | +ms.reviewer: eriw,dennhu,herbertm |
| 9 | +ms.custom: |
| 10 | +- sap:active directory\on-premises active directory domain join |
| 11 | +- pcy:WinComm Directory Services |
| 12 | +--- |
| 13 | +# Domain join error code 0x0000232A |
| 14 | + |
| 15 | +This article provides troubleshooting steps for resolving error code 0x0000232A when you join a workgroup computer to a domain. |
| 16 | + |
| 17 | +## Symptoms |
| 18 | + |
| 19 | +When you join a workgroup computer to a domain, you receive the following error message: |
| 20 | + |
| 21 | +> **Error code 0x0000232A** |
| 22 | +> |
| 23 | +> Computer Name/Domain Changes |
| 24 | +> |
| 25 | +> An Active Directory Domain Controller (AD DC) for the domain "\<NetBIOS\_name>" could not be contacted. |
| 26 | +> |
| 27 | +> Ensure that the domain name is typed correctly. |
| 28 | +> |
| 29 | +> If the name is correct, click Details for troubleshooting information. |
| 30 | +> |
| 31 | +> Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt. |
| 32 | +> |
| 33 | +> The domain name "\<NetBIOS\_name>" might be a NetBIOS domain name. If this is the case, verify that the domain name is properly registered with WINS. |
| 34 | +> |
| 35 | +> If you are certain that the name is not a NetBIOS domain name, then the following information can help you troubleshoot your DNS configuration. |
| 36 | +> |
| 37 | +> The following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "\<NetBIOS\_name>": |
| 38 | +> The error was: "DNS server failure." (error code 0x0000232A RCODE\_SERVER\_FAILURE) |
| 39 | +> |
| 40 | +> The query was for the SRV record for \_ldap.\_tcp.dc.\_msdcs.<NetBIOS\_name> |
| 41 | +> |
| 42 | +> Common causes of this error include the following: |
| 43 | +> |
| 44 | +> * The DNS servers used by this computer contain incorrect root hints. This computer is configured to use DNS servers with the following IP addresses: |
| 45 | +> \<ip\_address\> |
| 46 | +> * One or more of the following zones contains incorrect delegation: |
| 47 | + <NetBIOS\_name> . (the root zone) |
| 48 | +
|
| 49 | +Here's an example from the **netsetup.log** file: |
| 50 | + |
| 51 | +```output |
| 52 | +NetpValidateName: checking to see if '<NetBIOS_name>' is valid as type 3 name |
| 53 | +NetpCheckDomainNameIsValid for <NetBIOS_name> returned 0x54b, last error is 0x0 |
| 54 | +NetpCheckDomainNameIsValid [ Exists ] for '<NetBIOS_name>' returned 0x54b |
| 55 | +``` |
| 56 | + |
| 57 | +## Cause |
| 58 | + |
| 59 | +Error 0x0000232A indicates that the Domain Name System (DNS) name can't be resolved. The error code can appear with error codes such as RCODE\_NAME\_ERROR and RCODE\_SERVER\_FAILURE, which indicate potential misconfigurations in the DNS settings or root hints. Error 0x0000232A might also occur if the client computer lacks NetBIOS name resolution to the domain. |
| 60 | + |
| 61 | +## Troubleshooting steps |
| 62 | + |
| 63 | +1. When you enter the domain name, ensure that you enter the DNS domain name rather than the NetBIOS name. For example, if the DNS name of the domain is `contoso.com`, make sure you enter that name instead of `contoso`. |
| 64 | +2. Verify the DNS server settings on the client to ensure they point to the correct DNS server. |
| 65 | +3. In the DNS management console, confirm that the SRV records are correctly registered in DNS for the Active Directory domain controller (DC). |
| 66 | +4. Conduct tests to ensure that DNS queries from the client to the Active Directory Domain Services (AD DS) server are successful after adjustments are made: |
| 67 | + |
| 68 | + ```console |
| 69 | + nltest /dsgetdc: |
| 70 | + ``` |
| 71 | + |
| 72 | + The expected output should have the DC name as follows: |
| 73 | + |
| 74 | + ```output |
| 75 | + nltest /dsgetdc: |
| 76 | + DC: \\DC.contoso.com |
| 77 | + Address: \\<ip_address> |
| 78 | + Dom Guid: <Dom_Guid> |
| 79 | + Dom Name: contoso.com |
| 80 | + Forest Name: contoso.com |
| 81 | + Dc Site Name: Default-First-Site-Name |
| 82 | + Our Site Name: Default-First-Site-Name |
| 83 | + Flags: PDC GC DS LDAP KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE FULL_SECRET WS DS_8 DS_9 |
| 84 | + The command completed successfully |
| 85 | + ``` |
0 commit comments