You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/windows-server/active-directory/status-code-0x32-cannot-join-domain.md
+12-6Lines changed: 12 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,14 +18,10 @@ You fail to join a domain and receive one of the following error messages:
18
18
19
19
-> Can't join this domain. Contact your IT admin for more info.
20
20
21
-
:::image type="content" source="media/status-code-0x32-cannot-join-domain/cannot-join-domain-contact-it.png" alt-text="Screenshot of the error message showing that you can't join a domain and need to contact IT.":::
22
-
23
21
-> The following error occurred attempting to join the domain "adatum.com":
24
22
>
25
23
> The request is not supported.
26
24
27
-
:::image type="content" source="media/status-code-0x32-cannot-join-domain/error-occurred-request-not-support.png" alt-text="Screenshot of the error message showing that an error occurred and the request isn't supported.":::
28
-
29
25
When you check the **NetSetup.log** file, you see the following entries:
30
26
31
27
```output
@@ -52,9 +48,19 @@ Here's more information about the error code:
52
48
53
49
## The security policy is set incorrectly
54
50
55
-
The **NetSetup.log** file shows that the client fails to establish an SMB session with the DC. If you examine the network trace, it indicates that the DC returns STATUS_NOT_SUPPORTED to the C SESSION SETUP request from the client. The DC rejects the client's credential in the C SESSION SETUP request, which is the initial step of NT LAN Manager (NTLM) authentication.
51
+
The **NetSetup.log** file shows that the client fails to establish an SMB session with the DC. In the network trace, the SMB SESSION SETUP response has an error `NT Status: System – Error. Code = (187) STATUS_NOT_SUPPORTED`. If you examine the network trace, it indicates that the DC returns `STATUS_NOT_SUPPORTED` to the C SESSION SETUP request from the client. The DC rejects the client's credential in the C SESSION SETUP request, which is the initial step of NT LAN Manager (NTLM) authentication.
52
+
53
+
If you establish an SMB session to the DC from a workstation in the domain, it succeeds by using the hostname and fails by using the IP. For example:
56
54
57
-
If you establish an SMB session to the DC from a workstation in the domain, it succeeds by using the hostname and fails by using the IP.
55
+
```console
56
+
C:\users\administrator.adatum>net use \\192.168.2.254\ipc$
57
+
System error 53 has occurred.
58
+
59
+
The network path was not found.
60
+
61
+
C:\users\administrator.adatum>net use \\adatumdc2\ipc$
62
+
The operation completed successfully.
63
+
```
58
64
59
65
However, the network trace pattern shows the same. It seems that the DC doesn't accept NTLM authentication. Status code 0x32 occurs because the security policy **Network security: Restrict NTLM: Incoming NTLM traffic** is incorrectly set to **Deny all accounts**.
0 commit comments