Unable to join Azure AD domain from Azure VM

Bryan 6 Reputation points
2022-08-12T18:22:02.857+00:00

Hello, I'm new to Azure and am trying to join a VM to my Azure hosted AD. This is a .onmicrosoft.com domain.

The message I'm getting is

The following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "[domain name]":

The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)

I've verified that I'm able to ping the AD IP from the Windows VM.

I'm following the steps outlined in https://learn.microsoft.com/en-us/azure/active-directory-domain-services/join-windows-vm

Any help or tips would be appreciated.

Thank you in advance!

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} vote

2 answers

Sort by: Most helpful
  1. Cristian SPIRIDON 4,486 Reputation points Volunteer Moderator
    2022-08-13T05:02:25.717+00:00

    Hi,

    It does not make sense to have your domain with onmicrosoft.com suffix.

    I think you need to have your own DNS name and use it when you create the service.

    In the examples from the docs MSFT always uses custom domain name:

    https://learn.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance

    Hope this helps!

    0 comments No comments

  2. Rachel Gomez 166 Reputation points
    2022-08-13T05:29:46.607+00:00

    Troubleshooting steps are given below -

    Ensure the VM is connected to the same, or a peered, virtual network as the managed domain. If not, the VM can't find and connect to the domain in order to join.
    If the VM isn't connected to the same virtual network, confirm that the virtual networking peering or VPN connection is Active or Connected to allow the traffic to flow correctly.
    Try to ping the domain using the domain name of the managed domain, such as ping aaddscontoso.
    If the ping response fails, try to ping the IP addresses for the domain displayed on the overview page in the portal for your managed domain, such as ping 10.0.0.4.
    If you can successfully ping the IP address but not the domain, DNS may be incorrectly configured. Make sure that you've configured the managed domain DNS servers for the virtual network.
    Try flushing the DNS resolver cache on the virtual machine, such as ipconfig /flushdns.
    Try again to join Azure AD

    Greeting,
    Rachel Gomez

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.