Domain join problem

Question

We have a primary domain controller which contain fsmo role. But we have additional domain controller. when we shutdown the PDC but ADC is running , in the mean time when we try domain join , we are fail to domain join.

Is it possible to domain join on that period???

Answer 1

Hi Md. Nasir Uddin,

Thank you for posting in Q&A forum.

When you do the domain join operation, the domain controller which holds RID master role must online.

The relative ID (RID) master is a domain controller that allocates blocks of RIDs to each domain controller in the domain. Whenever a domain controller creates a new security principal, such as a user, group, or computer object, it assigns the object a unique security identifier. This SID consists of a domain SID, which is the same for each security principal that is created in the domain, and a RID, which is unique for each security principal in the domain.

If the PDC shutdown from time to time, you can choose to transfer the RID role to other domain controller. You can run below command to transfer the RID master role:

Move-ADDirectoryServerOperationMasterRole -Identity "Target-DC" -OperationMasterRole RIDMaster

 

And then check if you can join domain after PDC shutdown.

Hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

 

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hi @Md. Nasir Uddin

I think the problem comes from RID master role. The DC with rid master role must be online when you create new object in Active Directory.

During the domain join, a computer account will be created automatically .

To get more details about the RID master please refer to the following link

RID master FSMO role

In your case ,It seems that the RID master hosted with PDC in the same domain controller.

To check fsmo roles

netdom query fsmo

#to move RID master to another DC

Move-ADDirectoryServerOperationMasterRole -Identity "ADC_Name" -OperationMasterRole RIDMaster

---

Please don’t forget to accept helpful answer