{"id":546,"date":"2013-04-23T23:05:51","date_gmt":"2013-04-23T21:05:51","guid":{"rendered":"http:\/\/michlstechblog.info\/blog\/?p=546"},"modified":"2013-06-27T08:44:59","modified_gmt":"2013-06-27T06:44:59","slug":"vmware-computer-account-is-disabled-after-deploying-windows-clients","status":"publish","type":"post","link":"https:\/\/michlstechblog.info\/blog\/vmware-computer-account-is-disabled-after-deploying-windows-clients\/","title":{"rendered":"VMware: Computer Account is disabled after deploying Windows Clients"},"content":{"rendered":"<div class=\"twoclick_social_bookmarks_post_546 social_share_privacy clearfix 1.6.4 locale-en_US sprite-en_US\"><\/div><div class=\"twoclick-js\"><script type=\"text\/javascript\">\/* <![CDATA[ *\/\njQuery(document).ready(function($){if($('.twoclick_social_bookmarks_post_546')){$('.twoclick_social_bookmarks_post_546').socialSharePrivacy({\"services\":{\"flattr\":{\"uid\":\"Michl\",\"status\":\"on\",\"the_title\":\"VMware%3A%20Computer%20Account%20is%20disabled%20after%20deploying%20Windows%20Clients\",\"the_excerpt\":\"Hello%2C%0D%0A%0D%0Alast%20week%20I%20had%20to%20deploy%2025virtual%20Windows%20%28XP%29%20Clients%20an%20on%20VMware%20ESX%20Cluster.%20One%20of%20the%20requirements%20was%20that%20the%20clients%20must%20be%20member%20of%20a%20Windows%20Active%20Directory.%0D%0A%0D%0AAfter%20setting%20up%20vCenter%20%28copy%20sysprep%29%20I%20installed%20a%20reference%20Windows%20XP%20vm%2C%20convert%20them%20to%20a%20template%20and%20defined%20a%20Customization%20Specification%20like%20this%3A%0D%0A%0D%0A%0D%0A%0D%0ADuring%20the%20cloning%20process%2C%20by%20using%20the%20te%20...\",\"txt_info\":\"2 clicks for more data protection:\\r\\n\\r\\nOnly when you click here, the button will be come active and you can send your recommendation to Flattr. When activating, data are transmitted to third parties. \",\"perma_option\":\"off\"}},\"txt_help\":\"When you activate these fields by clicking, information to Flattr may be transferred abroad, and probably may also stored there.\",\"settings_perma\":\"Enable permanently and accept data transmission. \",\"info_link\":\"http:\\\/\\\/www.heise.de\\\/ct\\\/artikel\\\/2-Klicks-fuer-mehr-Datenschutz-1333879.html\",\"uri\":\"https:\\\/\\\/michlstechblog.info\\\/blog\\\/vmware-computer-account-is-disabled-after-deploying-windows-clients\\\/\",\"post_id\":546,\"post_title_referrer_track\":\"VMware%3A+Computer+Account+is+disabled+after+deploying+Windows+Clients\",\"display_infobox\":\"on\"});}});\n\/* ]]> *\/<\/script><\/div><p>Hello,<\/p>\n<p>last week I had to deploy 25virtual Windows (XP) Clients an on VMware ESX Cluster. One of the requirements was that the clients must be member of a Windows Active Directory.<\/p>\n<p>After setting up vCenter (copy sysprep) I installed a reference Windows XP vm, convert them to a template and defined a Customization Specification like this:<\/p>\n<figure id=\"attachment_547\" aria-describedby=\"caption-attachment-547\" style=\"width: 656px\" class=\"wp-caption alignnone\"><a href=\"http:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custspec-bad.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-547\" alt=\"Initial Customization Specification\" src=\"http:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custspec-bad.png\" width=\"656\" height=\"484\" srcset=\"https:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custspec-bad.png 656w, https:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custspec-bad-300x221.png 300w\" sizes=\"auto, (max-width: 656px) 100vw, 656px\" \/><\/a><figcaption id=\"caption-attachment-547\" class=\"wp-caption-text\">Initial Customization Specification<\/figcaption><\/figure>\n<p>During the cloning process, by using the template with the recently created custom spec, the domain join always fails and the Computer Account was disabled at each try.<\/p>\n<p>Ok, now I tried modify some parameter of the Custom Specification:<\/p>\n<ul>\n<li>Changing the Domain from fqdn to the NetBIOS Domain &#8220;SUB&#8221;<\/li>\n<li>Altered the Username to SUB\\joinuser or joinuser@SUB or joinuser@sub.domain.org<\/li>\n<\/ul>\n<p><!--more--><br \/>\nBut the result was always the same. The domain join fails or\/and the computer account was disabled. One of the following error messagse was written to %temp%\\vmware-inc\\guestcust.log<\/p>\n<ul>\n<li>Joining domain SUB using account joinuser and password &#8216;*****&#8217;<br \/>\nUnable to update the password. The value provided as the current password is incorrect.<\/li>\n<li>Joining domain sub.domain.org using account joinuser and password &#8216;*****&#8217;<br \/>\nUnable to update the password. The value provided as the current password is incorrect.<\/li>\n<li>Joining domain SUB using account joinuser and password &#8216;*****&#8217;<br \/>\nThe specified domain either does not exist or could not be contacted.<\/li>\n<li>Retrying SUB operation with user = joinuser@SUB<br \/>\nJoin domain failed with error &#8216;1355&#8217;.Retrying the operation after attempt 1<br \/>\nThe specified domain either does not exist or could not be contacted.<\/li>\n<\/ul>\n<p>&#8220;Unable to update the password. The value provided as the current password is incorrect.&#8221; means that the computer account is already disabled while vmware&#8217;s guestcustutil tries to join the domain.<\/p>\n<p>After some retries a found a setup which works stable.<\/p>\n<ol>\n<li>Add the FQDN to the domain field of the Customization Specifcation =&gt; sub.domain.org<\/li>\n<li>Add the Username in this format username@NetbiosDomainName =&gt; joinuser@sub\n<p><figure id=\"attachment_551\" aria-describedby=\"caption-attachment-551\" style=\"width: 653px\" class=\"wp-caption alignnone\"><a href=\"http:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custumspec-domain.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-551\" alt=\"Domain Settings\" src=\"http:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custumspec-domain.png\" width=\"653\" height=\"483\" srcset=\"https:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custumspec-domain.png 653w, https:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custumspec-domain-300x221.png 300w\" sizes=\"auto, (max-width: 653px) 100vw, 653px\" \/><\/a><figcaption id=\"caption-attachment-551\" class=\"wp-caption-text\">Domain Settings<\/figcaption><\/figure><\/li>\n<li>Specify\u00a0 custom Network Settings for NIC0<br \/>\nAdd\u00a0 the domain name and the parent domain to the DNS Suffix Searchlist<\/p>\n<p><figure id=\"attachment_549\" aria-describedby=\"caption-attachment-549\" style=\"width: 673px\" class=\"wp-caption alignnone\"><a href=\"http:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custumspec-network.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-549\" alt=\"Custom Spec Network Settings\" src=\"http:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custumspec-network.png\" width=\"673\" height=\"532\" srcset=\"https:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custumspec-network.png 673w, https:\/\/michlstechblog.info\/blog\/wp-content\/uploads\/2013\/04\/custumspec-network-300x237.png 300w\" sizes=\"auto, (max-width: 673px) 100vw, 673px\" \/><\/a><figcaption id=\"caption-attachment-549\" class=\"wp-caption-text\">Custom Spec Network Settings<\/figcaption><\/figure><\/li>\n<\/ol>\n<p>Now, it is ensured that FQDN and the NetBIOS Domainname can be resolved and the parameters are specified as guestcustutil it expects.<\/p>\n<p>Michael<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello, last week I had to deploy 25virtual Windows (XP) Clients an on VMware ESX Cluster. One of the requirements was that the clients must be member of a Windows Active Directory. After setting up vCenter (copy sysprep) I installed a reference Windows XP vm, convert them to a template and defined a Customization Specification &hellip; <a href=\"https:\/\/michlstechblog.info\/blog\/vmware-computer-account-is-disabled-after-deploying-windows-clients\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">VMware: Computer Account is disabled after deploying Windows Clients<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[129,130,125,126,131,127,132,92,128,14],"class_list":["post-546","post","type-post","status-publish","format-standard","hentry","category-vmware","tag-129","tag-current","tag-customization","tag-domain","tag-incorrect","tag-join","tag-not-exist","tag-password","tag-sysprep","tag-vmware-2"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/comments?post=546"}],"version-history":[{"count":19,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/546\/revisions"}],"predecessor-version":[{"id":817,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/546\/revisions\/817"}],"wp:attachment":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/media?parent=546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/categories?post=546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/tags?post=546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}