This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 42%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJY%3C/text%3E%3C/svg%3E)
I've been trying to deploy Windows 7/10/11 using MDT and during the task sequence, users can select the OU they want and join the domain. But when they select to join domain, when the installation finishes the post-installation task fails. It only happens when the computers join to a domain and OU, but, i've noticed that when the selected OU has no inheretance the post-installation task runs normally.
Here some logs from smsts.log and litetouch
Is there a way to fix this, because i want the machines to join the domain.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 98%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Check to ensure the secure boot is turned on & legacy boot is turned off, and try again.
Also check this article for help - https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/os-deployment/osd-task-sequence-fails-error-80070005
Ok, i'll try this tomorrow.
I disabled legacy boot and the didn't work. I tried the solution for setupcomplete.cmd but didn't work too.
Hi,
Thank you for posting in Microsoft Q&A forum.
1,The error 0x80070005 means "Access is denied". Which user you are using to join domain, does the user have correct permissions?
2,Please help check the c:\windows\debug\netsetup.log (detailed logging of join attempt) and c:\windows\setuperr.log (errors only) to see if there is any further information.
Thanks for your time. Have a nice day!
Best regards,
Simon
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
1-) I was using a user from Domain Admins group, but i didn't tried the Domain Administrator.
2-) I've checked netsetup.log with CMTrace, seems normal, no red line or errors. The setuperr.log is empty.
The permissions in DeploymentShare are only the local administrators of the server, not the administrators from domain, and the system group. Do i need to add the domain admins?
Hi,
Thanks for your reply.
You can add the domain admins to have a try. For test purpose, if you create a test OU, and join the device to test OU, does it work well?
Best regards,
Simon
I added domain admins, didn't work. I created a new OU, but, the error still happens with the same log.
Hi,
Thanks for your reply.
This is a strange issue. I will do more research, if there is any update, I will let you know. Thanks for your understanding.
Best regards,
Simon