RIS builds fail to join the domain after upgrade to windows 2003 S

I have upgraded my dev system to SP1 on all the infrastructure servers. After
doing this the RIS builds fall over when joining the domain. I get the
message: -

The user you have specified is not permitted to join the machine to the
domain.


The following is from the netsetup.log: -

11/25 10:42:43 NetpDoDomainJoin
11/25 10:42:43 NetpMachineValidToJoin: 'COMPUTER1'
11/25 10:42:43 NetpGetLsaPrimaryDomain: status: 0x0
11/25 10:42:43 NetpMachineValidToJoin: status: 0x0
11/25 10:42:43 NetpJoinDomain
11/25 10:42:43 Machine: COMPUTER1
11/25 10:42:43 Domain: mydomain.co.uk
11/25 10:42:43 MachineAccountOU: (NULL)
11/25 10:42:43 Account: (NULL)
11/25 10:42:43 Options: 0x40041
11/25 10:42:43 OS Version: 5.1
11/25 10:42:43 Build number: 2600
11/25 10:42:43 ServicePack: Service Pack 2
11/25 10:42:43 NetpValidateName: checking to see if 'mydomain.co.uk' is
valid as type 3 name
11/25 10:42:43 NetpValidateName: 'mydomain.co.uk' is not a valid NetBIOS
domain name: 0x7b
11/25 10:42:43 NetpCheckDomainNameIsValid [ Exists ] for 'mydomain.co.uk'
returned 0x0
11/25 10:42:43 NetpValidateName: name 'mydomain.co.uk' is valid for type 3
11/25 10:42:43 NetpDsGetDcName: trying to find DC in domain
'mydomain.co.uk', flags: 0x1020
11/25 10:42:43 NetpDsGetDcName: found DC '\\mydc01.mydomain.co.uk' in the
specified domain
11/25 10:42:43 NetpJoinDomain: status of connecting to dc
'\\mydc01.mydomain.co.uk': 0x0
11/25 10:42:43 NetpGetLsaHandle: LsaOpenPolicy on \\mydc01.mydomain.co.uk
failed: 0xc0000022
11/25 10:42:43 NetpGetLsaPrimaryDomain: status: 0xc0000022
11/25 10:42:43 NetpJoinDomain: initiaing a rollback due to earlier errors
11/25 10:42:43 NetpJoinDomain: status of disconnecting from
'\\mydc01.mydomain.co.uk': 0x0
11/25 10:42:43 NetpDoDomainJoin: status: 0x5


Does SP1 introduce enhanced security that may have caused this problem?

Hi,

from what I can see in the log you posted, is that when a RIS build tries to join your domain, it tries to find the netbios domain. In your logfile I can only see your DNS domain (mydomain.co.uk). This might be a reason why RIS fails to join the domain.

I have the same problem though with my Ris server. I can't join my domain either.