Resolution of the "Access Denied" error message when the computer is added to the domain

1. Symptoms

 

Sometimes, when the client is added to the domain, the following prompt is displayed:

2. Problem Analysis

The client uses the Lightweight Directory Access Protocol (LDAP) server or domain controller that has not been copied to this account to delete, but does not modify the correct permissions of the account that is still retained.

3. Solutions

 

To solve this problem, you can use any of the following methods:

• Use another computer name.
• Wait for Active Directory to copy, or use the following command to force the copy:Repadmin/syncDomainDNTarget DSA GUID. _ MsdcsSource DSA GUID/Force
• Use the domain administrator account when you join the account.
• Grant additional permissions to the account you are using:
  1. Start Adsiedit. msc.
  2. Open "Domain NC, DC =Domain, CN = Computers "node.
  3. Click computer, and then click Properties ".
  4. On the Security tab, click Advanced ".
  5. Click Add, and then click the appropriate user account or group.
  6. In the apply to box, click computer objects ".
  7. In the "Permissions" pane, click to select the "write all attributes", "Reset Password", and "apply these permissions only to objects and/or containers in this container" check box.
  8. Click OK until the change is made.
  9. Wait for Active Directory to copy or force synchronization.

This article is from the "zhushui liunian" blog