cannot join on-prem WS 2016 to Entra domain

IT 0 Reputation points
2025-11-25T20:58:54.5233333+00:00

Question: How do I join an on-prem VM to our Entra domain?

50 employees, M365, on-prem WS 2016, company was ransomwared.

Outlook was already in cloud, all desktops wiped, new w11, Entra Login with 2FA now on all desktops is working, all running SentinelOne. SonicWall locked down, no VPN, all ports closed. Everyone can surf, email, share files locally.

Wiped and rebuilt WS 2016 Hyper-V with WS2016 VM. Trying to join Entra domain from VM so I can run SharePoint migration tool.

I need to join the on-prem VM to the Entra domain.

M365 / Entra domain names are ttoledo.com, ttoledo.onmicrosoft.com.

ttoledo.com / www.ttoledo.com return 159.203.177.84 on ping / nslookup.

159.203.177.84 / ttoledo.com / www.ttoledo.com all to https://ttoledo.com.

<from command prompt>

IPv4 Address. . . . . . . . . . . : 192.168.0.158

Subnet Mask. . . . . . . . . . . : 255.255.255.0

GW, DHCP, DNS . . . . . . . : 192.168.0.1 (wireless gw)

changed DNS to 8.8.8.8, no difference

<from end of netsetup.log>

11/25/2025 12:12:09:093 -------------------------------------------------------

11/25/2025 12:12:09:093 NetpValidateName: checking to see if 'TTIData' is valid as type 5 name

11/25/2025 12:12:09:093 NetpValidateName: name 'TTIData' is valid for type 5

11/25/2025 12:12:09:093 -------------------------------------------------------

11/25/2025 12:12:09:093 NetpValidateName: checking to see if 'ttoledo.com' is valid as type 3 name

11/25/2025 12:12:09:125 NetpCheckDomainNameIsValid for ttoledo.com returned 0x54b, last error is 0x0

11/25/2025 12:12:09:125 NetpCheckDomainNameIsValid [ Exists ] for 'ttoledo.com' returned 0x54b

<from Computer Name / Domain Changes dialog box>

The following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "ttoledo.com":

The error was: "DNS name does not exist."

(error code 0x0000232B RCODE_NAME_ERROR)

The query was for the SRV record for _ldap._tcp.dc._msdcs.ttoledo.com

Common causes of this error include the following:

  • The DNS SRV records required to locate a AD DC for the domain are not registered in DNS. These records are registered with a DNS server automatically when a AD DC is added to a domain. They are updated by the AD DC at set intervals. This computer is configured to use DNS servers with the following IP addresses:

8.8.8.8

  • One or more of the following zones do not include delegation to its child zone:

ttoledo.com

com

. (the root zone)

<end of dialog box>

Will I need to change domain name? web site resolution? ttoledo.com entry?

help please, we are in dire need to get everything back up.

Rob Pettrey

admin account I am using is PII.onmicrosoft.com

my email address is PII

my phone/text number is PII

Microsoft Security | Microsoft Entra | Microsoft Entra ID

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.