Window 11 24H2 / Can't Join Domain

Anonymous
2024-08-28T15:27:07+00:00

We have about 500 PCs on our domain. Functional level is Server 2016. We received our first laptop from Dell which shipped with Windows 11 Pro 24H2 and it will not join. Since it's failure, I've tested various versions of Win10 and Win11 not running 24H2 and they all join just fine.

netsetup.log shows:

08/28/2024 08:09:17:784 -----------------------------------------------------------------

08/28/2024 08:09:17:784 NetpValidateName: checking to see if 'XPS' is valid as type 1 name

08/28/2024 08:09:17:784 NetpCheckNetBiosNameNotInUse for 'XPS' [MACHINE] returned 0x0

08/28/2024 08:09:17:784 NetpValidateName: name 'XPS' is valid for type 1

08/28/2024 08:09:17:810 -----------------------------------------------------------------

08/28/2024 08:09:17:810 NetpValidateName: checking to see if 'xps' is valid as type 5 name

08/28/2024 08:09:17:810 NetpValidateName: name 'xps' is valid for type 5

08/28/2024 08:09:17:816 -----------------------------------------------------------------

08/28/2024 08:09:17:816 NetpValidateName: checking to see if 'domainname' is valid as type 3 name

08/28/2024 08:09:17:816 NetpValidateName: 'domainname' is not a valid NetBIOS domain name: 0x7b

08/28/2024 08:09:28:877 NetpCheckDomainNameIsValid for domainname returned 0x54b, last error is 0x0

08/28/2024 08:09:28:877 NetpCheckDomainNameIsValid [ Exists ] for 'domainname' returned 0x54b

The PC attempting to join sits on the same subnet as our DCs and there are no security appliances/firewalls filtering traffic.

From the 24H2 PC that won't join, I have tried or am able to:

  • perform name resolution to various hostnames via nslookup
  • verified inbound/outbound AD ports are open on our DCs
  • DCs are replicating and are healthy (other PCs join w/o issue)
  • Access any other resource on our LAN
  • Tried statically assigning DNS servers (which are our DCs) on the PCs NIC
  • Disabled Windows firewall on the PC
  • Factory reset the laptop (Dell XPS 13 9345) and attempted again with no success

Another post suggest searching for a registry key relating to NT4Emulator on the DCs in the event the domain ever had an NT4 DC. This key doesn't exist on our DCs and if we had a DC running NT4 here, it was way before my arrival.

I can't think of any reason why this laptop is different other than it's the first running 24H2. I can't seem to find anyone having this issue.

Any help or suggestions is appreciated.

Windows for business | Windows Server | Directory services | Active Directory

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

72 answers

Sort by: Most helpful
  1. Anonymous
    2025-01-15T07:15:11+00:00

    I had the same problem with a "mydom." without tld .lan, .local .

    The problem was present both on 23H2 and 24H2

    Here is the fix I found and solved the problem :

    On each DC :

    KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\AllowSingleLabelDnsDomain  (dword 1)
    

    On computer :

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DnsCache\Parameters\UpdateTopLevelDomainZones (dword 1)
    

    Restart computer and join on "mydomain." (do not forget the "." to validate tld )

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2024-12-02T17:55:10+00:00

    Thank you for the post Neuvi. This problem is specific to Win11 24H2. Every Win other win client can connect without a problem. MS needs to address this as more people are running into this problem.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2024-11-08T17:39:16+00:00

    thanks for your input. this has to do with OOBE and UEFI. Rather not the problem of; not be able to join a corporate domain.

    Patch KB5044384 will solve the issue you mentioned. (OS Build 26100.2161)

    our problem is still pending....

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  4. Anonymous
    2024-10-28T02:06:41+00:00

    I found a work around that worked for my Win11 24H2 devices. This is by no means a fix.

    I opened a cmd and ran "ipconfig /renew" and in all cases Domain log ins and DNS calls started working after about 10 seconds.

    The whole TCP stack seems to drift randomly and the PCs eventually start behaving the same way, losing their Domain connections and ability to resolve DNS.

    Because of this I created a task on the PCs to run the command every hour in perpetuity. I am not fond of the idea of having to run this in the background, but it does seem to resolve things from the end user pov.

    Hopefully this might also be a red flag for developers.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  5. Anonymous
    2024-10-24T19:29:02+00:00

    tried that also before a few times but no fix. something else is causing this. so far no solutions to be found anywhere. i tried registry options and anything else i could find.... re-installing does not seem to fix it also. I can log into the domain but then i am forced into the guest network connection that wil limit functionality like network drives. only PVN connection over Citrix works and then i am logged into the .local network. only problem here is that it is extremly slow....

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments