Skip to content

Commit 98625c3

Browse files
committed
update
1 parent 11b3cac commit 98625c3

2 files changed

Lines changed: 2 additions & 34 deletions

File tree

support/windows-server/active-directory/active-directory-domain-join-troubleshooting-guidance.md

Lines changed: 1 addition & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -250,39 +250,7 @@ It indicates that the LDAP Port TCP 389 is open between the client and the DC.
250250

251251
### Error code 0x216d
252252

253-
The following error occurred when attempting to join the domain:
254-
255-
> Your computer could not be joined to the domain. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. Contact your system administrator to have this limit reset or increased.
256-
257-
:::image type="content" source="media/active-directory-domain-join-troubleshooting-guidance/error-0x216d-message.png" alt-text="Screenshot of the dialog box showing the error message for error code 0x216d.":::
258-
259-
```output
260-
mm/dd/yyyy hh:mm:ss:ms NetpMapGetLdapExtendedError: Parsed [0x216d] from server extended error string: 0000216D: SvcErr: DSID-031A124C, problem 5003 (WILL_NOT_PERFORM), data 0
261-
mm/dd/yyyy hh:mm:ss:ms NetpModifyComputerObjectInDs: ldap_add_s failed: 0x35 0x216d
262-
mm/dd/yyyy hh:mm:ss:ms NetpCreateComputerObjectInDs: NetpModifyComputerObjectInDs failed: 0x216d
263-
mm/dd/yyyy hh:mm:ss:ms NetpProvisionComputerAccount: LDAP creation failed: 0x216d
264-
mm/dd/yyyy hh:mm:ss:ms NetpProvisionComputerAccount: Retrying downlevel per options
265-
mm/dd/yyyy hh:mm:ss:ms NetpManageMachineAccountWithSid: NetUserAdd on '<dc_fqdn>' for 'CLIENT1$' failed: 0x216d
266-
mm/dd/yyyy hh:mm:ss:ms NetpProvisionComputerAccount: retry status of creating account: 0x216d
267-
mm/dd/yyyy hh:mm:ss:ms ldap_unbind status: 0x0
268-
mm/dd/yyyy hh:mm:ss:ms NetpJoinCreatePackagePart: status:0x216d.
269-
mm/dd/yyyy hh:mm:ss:ms NetpJoinDomainOnDs: Function exits with status of: 0x216d
270-
mm/dd/yyyy hh:mm:ss:ms NetpJoinDomainOnDs: status of disconnecting from '\\<dc_fqdn>': 0x0
271-
mm/dd/yyyy hh:mm:ss:ms NetpResetIDNEncoding: DnsDisableIdnEncoding(RESETALL) on '<domain_name>' returned 0x0
272-
mm/dd/yyyy hh:mm:ss:ms NetpJoinDomainOnDs: NetpResetIDNEncoding on '<domain_name>': 0x0
273-
mm/dd/yyyy hh:mm:ss:ms NetpDoDomainJoin: status: 0x216d
274-
```
275-
276-
Error 0x216d is logged in one of these conditions:
277-
278-
- The user account trying to join the machine to the domain has exceeded the limit of 10 machines joined to the domain.
279-
- There is a GPO restriction to block authenticated users from joining a machine to the domain.
280-
281-
Verify that the user account is a member of the group mentioned in the **Add Workstations to domain** policy of the **Default Domain Controller Policy** GPO or the **Winning** GPO.
282-
283-
The GPO setting is located at **Computer Configuration** > **Policies** > **Windows Settings** > **Security Settings** > **Local Policies User Rights Assignment** > **Add workstations to domain**.
284-
285-
To verify the default limit to the number of workstations a user can join to the domain, see [Default limit to number of workstations a user can join to the domain](default-workstation-numbers-join-domain.md).
253+
For more information, see [Status code 0x216d: Your computer could not be joined to the domain](status-code-0x216d-not-joined-domain.md).
286254

287255
### Other errors that occur when you join Windows-based computers to a domain
288256

support/windows-server/active-directory/status-code-0x216d-not-joined-domain.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Status Code 0x216d and Your Computer Can't Be Joined to the Domain
33
description: Helps resolve an issue in which you can't join a domain with status code 0x216d.
4-
ms.date: 04/17/2025
4+
ms.date: 04/23/2025
55
manager: dcscontentpm
66
audience: itpro
77
ms.topic: troubleshooting

0 commit comments

Comments
 (0)