XP Pro Joining 2K3 DC - LDAP_BIND error

Hi

Very new to this DC stuff. Normally I just write C/C++.

A DC is required to run MS Team Foundation Server (new software development
management stuff from MS).

However can't get client XP Pro SP2 box to move from a workgroup to the
newly installed 2K3 domain (via System|Computer Name|Change... or Network ID
on the XP Client).

Have tried for 12 hours straight.

Can ping from either direction, and can see and map shares from either
direction.

HTTP Server on 2K3 box working fine when XP Client looks to
\\TFS\default.aspx etc.

Have disabled all firewalls etc.

DNS setting on client points to the DC (which has DNS installed).

As (XP NetSetup.log) log below shows, main error seems to be:
07/10 21:09:41 NetpLdapBind: ldap_bind failed on \\tfs: 81: Server Down

After each attempt it is necessary to "Enable Account" for the (XP Client)
Computer ASUSL5 in the AD Computer settings on the DC.

Any help/tips appreciated.

07/10
21:08:07 -----------------------------------------------------------------
07/10 21:08:07 NetpValidateName: checking to see if 'MCSOFT' is valid as
type 3 name
07/10 21:08:07 NetpCheckDomainNameIsValid [ Exists ] for 'MCSOFT' returned
0x0
07/10 21:08:07 NetpValidateName: name 'MCSOFT' is valid for type 3
07/10
21:08:19 -----------------------------------------------------------------
07/10 21:08:19 NetpDoDomainJoin
07/10 21:08:19 NetpMachineValidToJoin: 'ASUSL5'
07/10 21:08:19 NetpGetLsaPrimaryDomain: status: 0x0
07/10 21:08:19 NetpMachineValidToJoin: status: 0x0
07/10 21:08:19 NetpJoinDomain
07/10 21:08:19 Machine: ASUSL5
07/10 21:08:19 Domain: MCSOFT
07/10 21:08:19 MachineAccountOU: (NULL)
07/10 21:08:19 Account: MCSOFT\Administrator
07/10 21:08:19 Options: 0x23
07/10 21:08:19 OS Version: 5.1
07/10 21:08:19 Build number: 2600
07/10 21:08:19 ServicePack: Service Pack 2
07/10 21:08:19 NetpValidateName: checking to see if 'MCSOFT' is valid as
type 3 name
07/10 21:08:19 NetpCheckDomainNameIsValid [ Exists ] for 'MCSOFT' returned
0x0
07/10 21:08:19 NetpValidateName: name 'MCSOFT' is valid for type 3
07/10 21:08:19 NetpDsGetDcName: trying to find DC in domain 'MCSOFT', flags:
0x1020
07/10 21:08:19 NetpDsGetDcName: found DC '\\tfs' in the specified domain
07/10 21:09:19 NetpJoinDomain: status of connecting to dc '\\tfs': 0x0
07/10 21:09:19 NetpGetLsaPrimaryDomain: status: 0x0
07/10 21:09:19 NetpGetDnsHostName: Read NV Hostname: asusl5
07/10 21:09:19 NetpGetDnsHostName: PrimaryDnsSuffix defaulted to DNS domain
name: mcsoft.tfs
07/10 21:09:19 NetpLsaOpenSecret: status: 0xc0000034
07/10 21:09:19 NetpGetLsaPrimaryDomain: status: 0x0
07/10 21:09:19 NetpLsaOpenSecret: status: 0xc0000034
07/10 21:09:20 NetpManageMachineAccountWithSid: NetUserAdd on '\\tfs' for
'ASUSL5$' failed: 0x8b0
07/10 21:09:20 NetpManageMachineAccountWithSid: status of attempting to set
password on '\\tfs' for 'ASUSL5$': 0x0
07/10 21:09:20 NetpJoinDomain: status of creating account: 0x0
07/10 21:09:41 NetpLdapBind: ldap_bind failed on \\tfs: 81: Server Down
07/10 21:09:41 ldap_unbind status: 0x0
07/10 21:09:41 NetpSetDnsHostNameAndSpn: NetpLdapBind failed: 0x3a
07/10 21:09:41 NetpJoinDomain: status of setting DnsHostName and SPN: 0x3a
07/10 21:09:41 NetpJoinDomain: initiaing a rollback due to earlier errors
07/10 21:09:41 NetpGetLsaPrimaryDomain: status: 0x0
07/10 21:09:41 NetpManageMachineAccountWithSid: status of disabling account
'ASUSL5$' on '\\tfs': 0x0
07/10 21:09:41 NetpJoinDomain: rollback: status of deleting computer
account: 0x0
07/10 21:09:41 NetpLsaOpenSecret: status: 0x0
07/10 21:09:42 NetpJoinDomain: rollback: status of deleting secret: 0x0
07/10 21:09:42 NetpJoinDomain: status of disconnecting from '\\tfs': 0x0
07/10 21:09:42 NetpDoDomainJoin: status: 0x3a

thanks

Andrew