現象：

無法加入AD，錯誤提示如下：
注意: 此信息主要供網絡管理員參考。如果您不是網絡的管理員，請通知網絡管理員您收到了此信息，記錄在文件 C:\WINDOWS\debug\dcdiag.txt 中。

域名 spt 可能是一個 NetBIOS 域名。如果是這種情況，請確認域名用 WINS 正確注冊。

如果您確認此名稱不是一個 NetBIOS 域名，那麼下面的信息將幫助您對 DNS 配置進行疑難解答:

當查詢 DNS 以獲得服務位置(SRV)資源記錄時遇到下列錯誤，此資源記錄用來為域 spt 定位域控制器:

錯誤是: "DNS 名稱不存在。"
(錯誤代碼 0x0000232B RCODE_NAME_ERROR)

查詢是為 _ldap._tcp.dc._msdcs.spt 查詢 SRV 記錄

此錯誤的一般原因包括:

- DNS SRV 記錄沒有在 DNS 中注冊。

- 下列區域的一個或多個不包括到它的子區域的代理:

spt
。 (根目錄區域)

有關怎樣更正此錯誤，請單擊“幫助”。

到網上找相關資料，有用的在這裡集合一下。

一：

添加 現有域的額外域控制器 錯誤代碼 0x0000232B RCODE_NAME_ERROR

我的主域控制器 10.75.1.53 已經安裝完成了
在安裝輔域控制器 10.75.1.54 時顯示 如圖：
且 10.75.1.54 的 dns 已經安裝，tcp/ip dns 設置為10.75.1.53
請大蝦指點迷津 搞定了，在主域 dns添加一個 d16.org 指向 10.75.1.53地記錄，並在10.75.1.54上重新從服務器上加載，或者等上幾分鐘，在cmd 中 ping d16.org 即可，恩，要有個同步的動作才能完成的。

二：

DNS error when you add a Windows XP-based computer to a Small Business Server 2000 domain

View products that this article applies to. Article ID : 331072 Last Review : October 30, 2006 Revision : 3.1 This article was previously published under Q331072 Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.

SYMPTOMS

When you try to add a Microsoft Windows XP Professional computer to a Microsoft Small Business Server 2000 domain, you may receive one of the following error messages: A domain controller for the domain DomainName.local could not be contacted. Ensure that the domain name is typed correctly. If the name is correct, click Details for troubleshooting information.When you click Details, you may see entries that are similar to one of the following: The following error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain DomainName.local:

The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR) The following error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain DomainName:

The error was: "This operation returned because the timeout period expired."
(error code 0x000005B4 ERROR_TIMEOUT)

 

CAUSE

The error may occur if any one of the following conditions is true: • Windows XP is not configured to use a local DNS server. • NetBIOS over TCP (NetBT) is disabled on Windows XP, and you are using the NetBT domain name when you try to add the computer. • A third-party firewall program that is installed on the Windows XP-based computer is blocking DNS queries. • You did not follow the recommended steps to set up Windows XP on a Small Business Server 2000 network.

 

RESOLUTION

Warning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

Note An antivirus program is designed to help protect your computer from viruses. You must not download or open files from sources that you do not trust, visit Web sites that you do not trust, or open e-mail attachments when your antivirus program is disabled.

For additional information about computer viruses, click the following article number to view the article in the Microsoft Knowledge Base: 129972 (http://support.microsoft.com/kb/129972/) Computer viruses: description, prevention, and recovery

Use a local DNS server

On Small Business Server 2000 networks, Microsoft recommends that you use the local IP address of the DNS server on all client computers. To configure Windows XP to use Small Business Server 2000 for the DNS server, follow these steps: 1. On Windows XP, click Start, and then click Control Panel. 2. If Control Panel is in Category View, click Switch to Classic View. 3. Double-click Network Connections. 4. Right-click the icon for the local area connection, and then click Properties. 5. Click Internet Protocol (TCP/IP), and then click Properties. 6. Under Use the following DNS server addresses, type the Small Business Server 2000 internal IP address, and then click OK two times.

Use the DNS domain name

After you make sure that Windows XP is using a local DNS server, use the full DNS domain name when you try to add the computer to the domain. To determine the DNS domain name, follow these steps: 1. On Small Business Server 2000, right-click My Computer, and then click Properties. 2. Click the Network Identification tab, and then check the domain name that is listed.

Remove third-party firewall software

1. On the Windows XP-based computer, click Start, and then click Control Panel. 2. If Control Panel is in Category View, click Switch to Classic View. 3. Double-click Add or Remove Programs. 4. Locate any Internet security or firewall software in the list of installed programs. 5. If you find an Internet security or firewall program in the list, click the program, and then click Remove.For additional information, click the following article number to view the article in the Microsoft Knowledge Base: 810402 (http://support.microsoft.com/kb/810402/) Clients cannot join a domain with Norton Internet Security 2002

Follow recommendations for setting up Windows XP

When you set up Windows XP on a Small Business Server 2000 network, Microsoft recommends that you add the computer to the domain before you install any client programs. In particular, do not install Microsoft Firewall Client. If you already installed Firewall Client, remove the program before you add the computer to the domain.

To remove Firewall Client, follow these steps: 1. On Windows XP, click Start, and then click Control Panel. 2. If Control Panel is in Category View, click Switch to Classic View. 3. Double-click Add or Remove Programs. 4. Click Microsoft Firewall Client, and then click Remove.If you ran the Set Up Computer Wizard on Small Business Server 2000 to install Firewall Client on the client computers, the program may not show up in the list of installed programs on the client computers. In this case, you must install Firewall Client manually on the client computer, and then remove the program.

To install Firewall Client manually, follow these steps: 1. On Windows XP, click Start, and then click Run. 2. Type \\ServerName\mspclnt where ServerName is the name of the Small Business Server 2000 computer, and then click OK. 3. When you are prompted, type a user name and password for a valid user account in the domain. 4. Double-click Setup.exe to start the installation of Firewall Client. 5. When the installation is complete, follow the steps in the "Follow recommendations for setting up Windows XP" section to remove Firewall Client.For additional information about how to set up Windows XP on a Small Business Server 2000 network, click the following article number to view the article in the Microsoft Knowledge Base: 316418 (http://support.microsoft.com/kb/316418/) How to set up a Windows XP Professional Client in an SBS 2000 network

---

APPLIES TO

• Microsoft Windows XP Professional • Microsoft Windows XP Professional • Microsoft Small Business Server 2000 Standard Edition • Microsoft BackOffice Small Business Server 2000 Service Pack 1

Keywords:

kbprb KB331072

PS：這裡我碰到的問題解決的方法是：

Remove third-party firewall software

1. On the Windows XP-based computer, click Start, and then click Control Panel. 2. If Control Panel is in Category View, click Switch to Classic View. 3. Double-click Add or Remove Programs. 4. Locate any Internet security or firewall software in the list of installed programs. 5. If you find an Internet security or firewall program in the list, click the program, and then click Remove.For additional information, click the following article number to view the article in the Microsoft Knowledge Base: 810402 (http://support.microsoft.com/kb/810402/) Clients cannot join a domain with Norton Internet Security 2002
就是說，開啟了第三方防火牆軟件造成的，簡單吧？？？但是我找了2小時才搞定它！！！！！