This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
we're trying to implement NTLM blocking (yes, this article is from 2009) and have enabled the relevant GPOs both on DCs and all member systems.
surprisingly enough most things work just fine, which is good. but joining new computers to the domain doesn't.
we receive "The request is not supported"
Any guidance on how to make this work?
found the error and thought i leave this here for others: using the upn (user@keyman .local) instead of domain\user makes it work.
unfortunately, only for manual joins.
doing domain join through sccm fails as we can only specify the user as domain\user ....
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 46%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
Update the task sequence and replace domain\user with FQDN\user
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 41%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETJ%3C/text%3E%3C/svg%3E)
Quick note, it's not necessarily the UPN. It seems the FQDN of the user needs to match the domain it's joining. My UPN is shortened, and I receive the same "not supported" error. I.e. joining to ad.domain.local and the UPN is user@domain.local still fails. Entering the user@ad.domain.local does work.
I assume Kerberos is ONLY used when the domain your joining and the FDQN match. Which surprises me to no end.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 68%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELT%3C/text%3E%3C/svg%3E)
Hello there,
If the issue happens for multiple PCs when joining the domain , it is suggested to check the status of the DCs and the replication among DCs, DNS configuration.
Run command the DCs and confirm if there are any errors:
Dcdiag /v >c:\dcdiag1.log
Repadmin /syncall /APeD
Repadmin /showrepl >C:\repl.txt
Repadmin /showreps *
Ipconfig /all > C:\dc.txt
Hope this resolves your Query !!
--If the reply is helpful, please Upvote and Accept it as an answer–
