Skip to content

Commit 7c59abb

Browse files
authored
update per sme comments
1 parent ba836af commit 7c59abb

3 files changed

Lines changed: 12 additions & 6 deletions

File tree

support/windows-server/active-directory/status-code-0x32-cannot-join-domain.md

Lines changed: 12 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,14 +18,10 @@ You fail to join a domain and receive one of the following error messages:
1818

1919
- > Can't join this domain. Contact your IT admin for more info.
2020
21-
:::image type="content" source="media/status-code-0x32-cannot-join-domain/cannot-join-domain-contact-it.png" alt-text="Screenshot of the error message showing that you can't join a domain and need to contact IT.":::
22-
2321
- > The following error occurred attempting to join the domain "adatum.com":
2422
>
2523
> The request is not supported.
2624
27-
:::image type="content" source="media/status-code-0x32-cannot-join-domain/error-occurred-request-not-support.png" alt-text="Screenshot of the error message showing that an error occurred and the request isn't supported.":::
28-
2925
When you check the **NetSetup.log** file, you see the following entries:
3026

3127
```output
@@ -52,9 +48,19 @@ Here's more information about the error code:
5248

5349
## The security policy is set incorrectly
5450

55-
The **NetSetup.log** file shows that the client fails to establish an SMB session with the DC. If you examine the network trace, it indicates that the DC returns STATUS_NOT_SUPPORTED to the C SESSION SETUP request from the client. The DC rejects the client's credential in the C SESSION SETUP request, which is the initial step of NT LAN Manager (NTLM) authentication.
51+
The **NetSetup.log** file shows that the client fails to establish an SMB session with the DC. In the network trace, the SMB SESSION SETUP response has an error `NT Status: System – Error. Code = (187) STATUS_NOT_SUPPORTED`. If you examine the network trace, it indicates that the DC returns `STATUS_NOT_SUPPORTED` to the C SESSION SETUP request from the client. The DC rejects the client's credential in the C SESSION SETUP request, which is the initial step of NT LAN Manager (NTLM) authentication.
52+
53+
If you establish an SMB session to the DC from a workstation in the domain, it succeeds by using the hostname and fails by using the IP. For example:
5654

57-
If you establish an SMB session to the DC from a workstation in the domain, it succeeds by using the hostname and fails by using the IP.
55+
```console
56+
C:\users\administrator.adatum>net use \\192.168.2.254\ipc$
57+
System error 53 has occurred.
58+
59+
The network path was not found.
60+
61+
C:\users\administrator.adatum>net use \\adatumdc2\ipc$
62+
The operation completed successfully.
63+
```
5864

5965
However, the network trace pattern shows the same. It seems that the DC doesn't accept NTLM authentication. Status code 0x32 occurs because the security policy **Network security: Restrict NTLM: Incoming NTLM traffic** is incorrectly set to **Deny all accounts**.
6066

0 commit comments

Comments
 (0)