You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/windows-server/active-directory/error-code-0x54b.md
+25-27Lines changed: 25 additions & 27 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
-
title: Domain join error code 0x54b
3
-
description: Provides troubleshooting steps for resolving the error code 0x54b when you join a workgroup computer to a domain.
4
-
ms.date: 04/17/2025
2
+
title: Domain Join Error Code 0x54b
3
+
description: Provides troubleshooting steps for resolving error code 0x54b when you join a workgroup computer to a domain.
4
+
ms.date: 04/23/2025
5
5
manager: dcscontentpm
6
6
audience: itpro
7
7
ms.topic: troubleshooting
@@ -12,13 +12,13 @@ ms.custom:
12
12
---
13
13
# Domain join error code 0x54b
14
14
15
-
This article provides troubleshooting steps for resolving the error code 0x54b when you join a workgroup computer to a domain.
15
+
This article provides troubleshooting steps for resolving error code 0x54b when you join a workgroup computer to a domain.
16
16
17
-
## Symptom
17
+
## Symptoms
18
18
19
19
When you join a workgroup computer to a domain, you receive the following error message:
20
20
21
-
> **Error code 0x0000232A**
21
+
> **Error code 0x54b**
22
22
>
23
23
> Computer Name/Domain Changes
24
24
>
@@ -41,7 +41,7 @@ When you join a workgroup computer to a domain, you receive the following error
41
41
>
42
42
> Verify that this computer is connected to the network, that these are the correct DNS server IP addresses, and that at least one of the DNS servers is running.
43
43
44
-
Here's an example from the *netsetup.log* file:
44
+
Here's an example from the **netsetup.log** file:
45
45
46
46
```output
47
47
NetpValidateName: checking to see if '<domain_name>' is valid as type 3 name
@@ -51,29 +51,27 @@ NetpCheckDomainNameIsValid [ Exists ] for '<domain_name>' returned 0x54b
51
51
52
52
## Cause
53
53
54
-
Error code 0x54b means "ERROR\_NO\_SUCH\_DOMAIN". This error code indicates the specified domain couldn't be contacted, pointing to issues in locating domain controllers.
54
+
Error code 0x54b means "ERROR\_NO\_SUCH\_DOMAIN." This error code indicates the specified domain can't be contacted, pointing to issues locating domain controllers (DCs).
55
55
56
-
* Domain Name System (DNS) time-outs and resolution failures when attempting to reach domain controllers.
57
-
* Network connectivity to DC is blocked on TCP port 135,389,445, or RPC dynamic ports.
56
+
* Domain Name System (DNS) times out and resolution fails when attempting to reach DCs.
57
+
* Network connectivity to DCs is blocked on TCP port 135,389,445, or RPC dynamic ports.
58
58
59
59
## Troubleshooting steps
60
60
61
61
To resolve the 0x54b error, follow these steps:
62
62
63
-
### Step 1
63
+
### Step 1: Check the network connectivity between the client and the DC
64
64
65
-
Check the network connectivity between the client and the Domain controller
66
-
67
-
| Server Port | Service |
65
+
| Server port | Service |
68
66
| --------------- | ------------------- |
69
67
| TCP 135 | RPC Endpoint Mapper |
70
68
| TCP 49152-65535 | RPC Dynamic Ports |
71
69
| TCP 445 | SMB |
72
70
| UDP/TCP 389 | LDAP |
73
71
74
-
* Refer to the list of required ports in [How to configure a firewall for Active Directory domains and trusts](config-firewall-for-ad-domains-and-trusts.md).
72
+
* Refer to the list of required ports in [How to configure a firewall for Active Directory domains and trusts](config-firewall-for-ad-domains-and-trusts.md).
75
73
76
-
* Use Test-NetConnection command to test connection between DC.
74
+
* Use the `Test-NetConnection` command to test the connection between DCs:
@@ -86,9 +84,9 @@ Check the network connectivity between the client and the Domain controller
86
84
TcpTestSucceeded : True
87
85
```
88
86
89
-
It indicates that the LDAP Port TCP 389 is open between the client and the DC.
87
+
It indicates that the LDAP port TCP 389 is open between the client and the DC.
90
88
91
-
*[PortQry Command Line Port Scanner Version 2.0](https://www.microsoft.com/download/details.aspx?id=17148) can also be used to identify if a port(TCP/UDP) is blocked on DC. Example syntax:
89
+
*[PortQry Command Line Port Scanner Version 2.0](https://www.microsoft.com/download/details.aspx?id=17148) can also be used to identify if a port(TCP/UDP) is blocked on DCs. Here's an example syntax:
92
90
93
91
```console
94
92
portqry -n <problem_server> -e 135
@@ -100,7 +98,7 @@ Check the network connectivity between the client and the Domain controller
100
98
101
99
Port query output examples:
102
100
103
-
*On connection to TCP Port 135 on DC is blocked, the following message is displayed:
101
+
*When the connection to TCP port 135 on a DC is blocked, the following message is displayed:
104
102
105
103
```console
106
104
portqry -n <dc_name> -e 135
@@ -118,7 +116,7 @@ Check the network connectivity between the client and the Domain controller
118
116
TCP port 135 (epmap service):FILTERED
119
117
```
120
118
121
-
* On successful connection to TCP port 389 on DC, the following message is displayed:
119
+
* When the connection to TCP port 389 on a DC is successful, the following message is displayed:
122
120
123
121
```console
124
122
portqry -n <dc_name> -e 389
@@ -136,13 +134,11 @@ Check the network connectivity between the client and the Domain controller
136
134
TCP port 389 (ldap service): LISTENING
137
135
```
138
136
139
-
* Collect network monitor trace when reproducing the issue to confirm if there's any network connectivity issue if necessary.
140
-
141
-
### Step 2
137
+
* Collect network monitor traces when reproducing the issue to confirm if there's any network connectivity issue, if necessary.
142
138
143
-
Verify if the Preferred DNS Server is the correct DNS Server.
139
+
### Step 2: Verify if the preferred DNS server is the correct DNS server
144
140
145
-
### Step 3
141
+
### Step 3: Verify if the DC can be discovered
146
142
147
143
Run `nltest /dsgetdc` (DC Discovery) to verify if you can discover a DC. For example:
148
144
@@ -160,6 +156,8 @@ Our Site Name: Default-First-site-Name
160
156
The command completed successfully
161
157
```
162
158
163
-
### Step 4
159
+
### Step 4: Verify if SRV records are registered
160
+
161
+
Run `DCDiag /v` on the closest DC and verify if SRV records are registered. For example:
164
162
165
-
Run `DCDiag /v` on the closest domain controller and verify if SRV records are registered. For example: **\_ldap.\_tcp.dc.\_msdcs.\<domain\_name>.com.**
0 commit comments