Autopilot and domains

penguin_roundup 1

I am working with new windows 10 laptop that was provisioned using Autopilot. The user is trying to use "Active Directory Administrative Center" but keeps getting the following error when trying to launch the app:

"Cannot find an available server in the <DOMAINNAME> domain that is running the ADWS service."

ADWS is running normally, as users who have domain-joined laptops can connect with no errors. The autopilot client can see all the domain controllers, (ping, Test-Netconnection to port 9389, etc). ADUC also is able to connect...So it's not a connectivity issue.

We've also tried using "dsac.exe -Server <IPADDRESS>" but still get the same error. Is there another way to force ADAC to use a specific DC?

thanks in advance.

Dillon Silzer 57,231 Reputation points

2022-09-16T15:45:28.44+00:00

When you connected a device using Autopilot it connects via AAD, not local AD. Are you running in a hybrid scenario where you connect the computer to local AD as well?
penguin_roundup 1 Reputation point

2022-09-16T17:29:23.84+00:00

No, the laptop is strictly AAD-connected.
Thiago Beier 1 Reputation point MVP

2022-09-17T05:13:34.153+00:00

if your laptop is AAD-connected only as you mentioned you won't be able to user ADUC to manage if not connected on CORP network with access to DCs
I've seen the following behavior
AAD only device, connected to CORP network (ADDS site) where when you're in the office (CORP network) you're able to reach \DC01.fqdn using the same "AzureAD\user" creds.
or either file server \fileserver\shared-folder\
penguin_roundup 1 Reputation point

2022-09-19T14:59:03.107+00:00

The user is able to use ADUC but not Active Directory Administrative Center.

User is also able to browse the \<domaincontroller\sysvol folder from the client as well.

The user can browse domain resources from the laptop, it's just the ADAC that thinks it can't connect. It seems to look for the environment variable "LOGONSERVER" which is set to the client name since it's not "joined" to the actual domain. There doesn't seem to be a way to tell ADAC to connect to a different server.

1 answer

penguin_roundup 1 Reputation point

2022-09-19T19:26:15.447+00:00

The user can use ADUC to connect to a domain controller once connected to the corporate network via VPN. User can also connect to the SYSVOL share on the domain controllers using domain credentials when prompted.

It seems to be just the ADAC that won't allow manual selection of a DC (seems it will only use what's specified in the LOGONSERVER environment variable).
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Autopilot and domains

1 answer

Your answer