【技巧】0x0000232B RCODE_NAME_ERROR错误的解决参考
无法加入AD，错误提示如下：
注意: 此信息主要供网络管理员参考。如果您不是网络的管理员，请通知网络管理员您收到了此信息，记录在文件 C:\WINDOWS\debug\dcdiag.txt 中。
域名 spt 可能是一个 NetBIOS 域名。如果是这种情况，请确认域名用 WINS 正确注册。
如果您确认此名称不是一个 NetBIOS 域名，那么下面的信息将帮助您对 DNS 配置进行疑难解答:
当查询 DNS 以获得服务位置(SRV)资源记录时遇到下列错误，此资源记录用来为域 spt 定位域控制器:
错误是: "DNS 名称不存在。"
(错误代码 0x0000232B RCODE_NAME_ERROR)
查询是为 _ldap._tcp.dc._msdcs.spt 查询 SRV 记录
此错误的一般原因包括:
- DNS SRV 记录没有在 DNS 中注册。
- 下列区域的一个或多个不包括到它的子区域的代理:
spt
。 (根目录区域)
有关怎样更正此错误，请单击“帮助”。
到网上找相关资料，有用的在这里集合一下。
一：
添加 现有域的额外域控制器 错误代码 0x0000232B RCODE_NAME_ERROR
我的主域控制器 10.75.1.53 已经安装完成了
在安装辅域控制器 10.75.1.54 时显示 如图：
且 10.75.1.54 的 dns 已经安装，tcp/ip dns 设置为10.75.1.53
请大虾指点迷津
搞定了，在主域 dns添加一个 d16.org 指向 10.75.1.53地记录，并在10.75.1.54上重新从服务器上加载，或者等上几分钟，在cmd 中 ping d16.org 即可，恩，要有个同步的动作才能完成的。
二：
DNS error when you add a Windows XP-based computer to a Small Business Server 2000 domain
View products that this article applies to.
Article ID:331072
Last Review:October 30, 2006
Revision:3.1
This article was previously published under Q331072
Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.
SYMPTOMSWhen you try to add a Microsoft Windows XP Professional computer to a Microsoft Small Business Server 2000 domain, you may receive one of the following error messages:
A domain controller for the domain DomainName.local could not be contacted.
Ensure that the domain name is typed correctly.
If the name is correct, click Details for troubleshooting information.
When you click Details, you may see entries that are similar to one of the following:
The following error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain DomainName.local:
The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)
The following error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain DomainName:
The error was: "This operation returned because the timeout period expired."
(error code 0x000005B4 ERROR_TIMEOUT)
CAUSEThe error may occur if any one of the following conditions is true: /FONT>Windows XP is not configured to use a local DNS server.
/FONT>NetBIOS over TCP (NetBT) is disabled on Windows XP, and you are using the NetBT domain name when you try to add the computer.
/FONT>A third-party firewall program that is installed on the Windows XP-based computer is blocking DNS queries.
/FONT>You did not follow the recommended steps to set up Windows XP on a Small Business Server 2000 network.
RESOLUTIONWarning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.
Note An antivirus program is designed to help protect your computer from viruses. You must not download or open files from sources that you do not trust, visit Web sites that you do not trust, or open e-mail attachments when your antivirus program is disabled.
For additional information about computer viruses, click the following article number to view the article in the Microsoft Knowledge Base:
129972 (//support.microsoft.com/kb/129972/) Computer viruses: description, prevention, and recovery
Use a local DNS server
On Small Business Server 2000 networks, Microsoft recommends that you use the local IP address of the DNS server on all client computers. To configure Windows XP to use Small Business Server 2000 for the DNS server, follow these steps: 1.On Windows XP, click Start, and then click Control Panel.
2.If Control Panel is in Category View, click Switch to Classic View.
3.Double-click Network Connections.
4.Right-click the icon for the local area connection, and then click Properties.
5.Click Internet Protocol (TCP/IP), and then click Properties.
6.Under Use the following DNS server addresses, type the Small Business Server 2000 internal IP address, and then click OK two times.
Use the DNS domain name
After you make sure that Windows XP is using a local DNS server, use the full DNS domain name when you try to add the computer to the domain. To determine the DNS domain name, follow these steps: 1.On Small Business Server 2000, right-click My Computer, and then click Properties.
2.Click the Network Identification tab, and then check the domain name that is listed.
Remove third-party firewall software
1.On the Windows XP-based computer, click Start, and then click Control Panel.
2.If Control Panel is in Category View, click Switch to Classic View.
3.Double-click Add or Remove Programs.
4.Locate any Internet security or firewall software in the list of installed programs.
5.If you find an Internet security or firewall program in the list, click the program, and then click Remove.
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
810402 (//support.microsoft.com/kb/810402/) Clients cannot join a domain with Norton Internet Security 2002
Follow recommendations for setting up Windows XP
When you set up Windows XP on a Small Business Server 2000 network, Microsoft recommends that you add the computer to the domain before you install any client programs. In particular, do not install Microsoft Firewall Client. If you already installed Firewall Client, remove the program before you add the computer to the domain.
To remove Firewall Client, follow these steps: 1.On Windows XP, click Start, and then click Control Panel.
2.If Control Panel is in Category View, click Switch to Classic View.
3.Double-click Add or Remove Programs.
4.Click Microsoft Firewall Client, and then click Remove.
If you ran the Set Up Computer Wizard on Small Business Server 2000 to install Firewall Client on the client computers, the program may not show up in the list of installed programs on the client computers. In this case, you must install Firewall Client manually on the client computer, and then remove the program.
To install Firewall Client manually, follow these steps: 1.On Windows XP, click Start, and then click Run.
2.Type \\ServerName\mspclnt where ServerName is the name of the Small Business Server 2000 computer, and then click OK.
3.When you are prompted, type a user name and password for a valid user account in the domain.
4.Double-click Setup.exe to start the installation of Firewall Client.
5.When the installation is complete, follow the steps in the "Follow recommendations for setting up Windows XP" section to remove Firewall Client.
For additional information about how to set up Windows XP on a Small Business Server 2000 network, click the following article number to view the article in the Microsoft Knowledge Base:
316418 (//support.microsoft.com/kb/316418/) How to set up a Windows XP Professional Client in an SBS 2000 network
APPLIES TO
/FONT>Microsoft Windows XP Professional
/FONT>Microsoft Windows XP Professional
/FONT>Microsoft Small Business Server 2000 Standard Edition
/FONT>Microsoft BackOffice Small Business Server 2000 Service Pack 1
Keywords: kbprb KB331072
PS：这里我碰到的问题解决的方法是：
Remove third-party firewall software
1.On the Windows XP-based computer, click Start, and then click Control Panel.
2.If Control Panel is in Category View, click Switch to Classic View.
3.Double-click Add or Remove Programs.
4.Locate any Internet security or firewall software in the list of installed programs.
5.If you find an Internet security or firewall program in the list, click the program, and then click Remove.
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
810402 (//support.microsoft.com/kb/810402/) Clients cannot join a domain with Norton Internet Security 2002
就是说，开启了第三方防火墙软件造成的，简单吧？？？但是我找了2小时才搞定它！！！！！
