Domain Connection Error on SCE 2010 Install
I am attempting to install System Center Essentials 2010 and keep recieving the same error. Every time I attempt to install I receive an error before the install process begins. After clicking "install" a splash screen appears for a few seconds and a message box appears with the message, "Setup cannot continue because Essentials could not connect to the domain. Use Active Directory Domain Services to verify that a connection to the domain is possible and try again." I have tested my conenection to the domain via Active Directory Users and Computers, Active Directory Domains and Trusts, and Active Directory Sites and Services. I have also successfully been able to connect to the server via UNC path as well as recieved a valid IP address and DNS name when performing an NSLOOKUP from another machine. The server is 2003 SP2, Intel Xeon CPU E5420 with 4GB RAM Hyper-V guest with 20GB Hard Drive Space. I have attempted installs on other servers in our Domain which are currently in use. I have attempted installs on a Virtual Server 2008 Hyper-V guest, and 2 different Physical Server 2003 Hyper-V hosts. Each install attempt keeps returning the same error. The credentials we are using for the install have domain level rights to the Active Directory containers our organization is housed in, as well as Administrative rights on the Servers. However, we are not Full Domain Adminsistrators. Our domain functional level is Server 2003. Any troubleshooting suggestions will be greatly appreciated. Thank You, Chris
June 11th, 2010 6:05pm

Hello, Is there any error message logged in the installation log? For more information about failures in installing or configuring Essentials 2010, refer to the error log files. For Windows Server 2003, the error log files are located in %USERPROFILE%\LOCAL SETTINGS\Application Data\SCE\LOGS. Thanks, Yog Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
June 14th, 2010 6:21am

Hello, Is there any error message logged in the installation log? For more information about failures in installing or configuring Essentials 2010, refer to the error log files. For Windows Server 2003, the error log files are located in %USERPROFILE%\LOCAL SETTINGS\Application Data\SCE\LOGS. Thanks, Yog Li - MSFT
June 14th, 2010 6:21am

I don't see anything related to domain connection issues; this is all that is shown in the Logs each time I try an install: "Message Type 2: WinMain : Start ... Message Type 2: CBootStrapper::HandleUrl : Start ... Message Type 1: IsReadOnly: Checking if Automatic Update settings are ReadOnly Message Type 1: IsReadOnly: Automatic Update settings are NOT ReadOnly Message Type 2: CBootStrapper::LaunchSetup : Start ... Message Type 2: GetTempDirectory : Start ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010\setup\i386\ Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE Message Type 2: CopyFileList : Finished ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010 Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE Message Type 2: CopyFileList : Finished ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010\ProductDocumentation\\ Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE Message Type 2: CopyFileList : Finished ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010\setup\i386\EN Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE\EN Message Type 2: CopyFileList : Finished ... Message Type 2: Wrote key used for the MU update check. Key : SOFTWARE\Microsoft\System Center Essentials\2.0\Setup\Bootstrapper Message Type 2: Wrote value used for the MU update check. The this key is used by the MU to check our SKU. Value : Retail Message Type 1: SetupUpdate: Checking WUA version Message Type 1: Partial opting-in to MU Message Type 1: Partial opting-in to MU succeeded. Message Type 1: Started searching for new updates Message Type 1: update.IsSearchCompleted returned TRUE. Message Type 2: SCEWindowsUpdateProgressDialogFunc : WM_INITDIALOG. Message Type 1: Finished searching for new updates Message Type 1: Updates available: : 0 Message Type 2: CBootStrapper::LaunchSetup : Setup update was successful Message Type 2: Launching EXE : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE\setup.exe Message Type 2: CBootStrapperBase::LaunchExeAndWait : Starting... Message Type 2: CBootStrapperBase::LaunchExeAndWait : Finished... Message Type 2: CommonWinMain : Main returned success"
Free Windows Admin Tool Kit Click here and download it now
June 14th, 2010 9:21am

I don't see anything related to domain connection issues; this is all that is shown in the Logs each time I try an install: "Message Type 2: WinMain : Start ... Message Type 2: CBootStrapper::HandleUrl : Start ... Message Type 1: IsReadOnly: Checking if Automatic Update settings are ReadOnly Message Type 1: IsReadOnly: Automatic Update settings are NOT ReadOnly Message Type 2: CBootStrapper::LaunchSetup : Start ... Message Type 2: GetTempDirectory : Start ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010\setup\i386\ Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE Message Type 2: CopyFileList : Finished ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010 Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE Message Type 2: CopyFileList : Finished ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010\ProductDocumentation\\ Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE Message Type 2: CopyFileList : Finished ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010\setup\i386\EN Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE\EN Message Type 2: CopyFileList : Finished ... Message Type 2: Wrote key used for the MU update check. Key : SOFTWARE\Microsoft\System Center Essentials\2.0\Setup\Bootstrapper Message Type 2: Wrote value used for the MU update check. The this key is used by the MU to check our SKU. Value : Retail Message Type 1: SetupUpdate: Checking WUA version Message Type 1: Partial opting-in to MU Message Type 1: Partial opting-in to MU succeeded. Message Type 1: Started searching for new updates Message Type 1: update.IsSearchCompleted returned TRUE. Message Type 2: SCEWindowsUpdateProgressDialogFunc : WM_INITDIALOG. Message Type 1: Finished searching for new updates Message Type 1: Updates available: : 0 Message Type 2: CBootStrapper::LaunchSetup : Setup update was successful Message Type 2: Launching EXE : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE\setup.exe Message Type 2: CBootStrapperBase::LaunchExeAndWait : Starting... Message Type 2: CBootStrapperBase::LaunchExeAndWait : Finished... Message Type 2: CommonWinMain : Main returned success"
June 14th, 2010 9:21am

Hello, Is there any error message logged in the installation log? For more information about failures in installing or configuring Essentials 2010, refer to the error log files. For Windows Server 2003, the error log files are located in %USERPROFILE%\LOCAL SETTINGS\Application Data\SCE\LOGS. Thanks, Yog Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
June 14th, 2010 1:21pm

I don't see anything related to domain connection issues; this is all that is shown in the Logs each time I try an install: "Message Type 2: WinMain : Start ... Message Type 2: CBootStrapper::HandleUrl : Start ... Message Type 1: IsReadOnly: Checking if Automatic Update settings are ReadOnly Message Type 1: IsReadOnly: Automatic Update settings are NOT ReadOnly Message Type 2: CBootStrapper::LaunchSetup : Start ... Message Type 2: GetTempDirectory : Start ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010\setup\i386\ Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE Message Type 2: CopyFileList : Finished ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010 Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE Message Type 2: CopyFileList : Finished ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010\ProductDocumentation\\ Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE Message Type 2: CopyFileList : Finished ... Message Type 2: CopyFileList : Start ... Message Type 2: Copying Files from : C:\SCE2010\setup\i386\EN Message Type 2: Copying Files to : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE\EN Message Type 2: CopyFileList : Finished ... Message Type 2: Wrote key used for the MU update check. Key : SOFTWARE\Microsoft\System Center Essentials\2.0\Setup\Bootstrapper Message Type 2: Wrote value used for the MU update check. The this key is used by the MU to check our SKU. Value : Retail Message Type 1: SetupUpdate: Checking WUA version Message Type 1: Partial opting-in to MU Message Type 1: Partial opting-in to MU succeeded. Message Type 1: Started searching for new updates Message Type 1: update.IsSearchCompleted returned TRUE. Message Type 2: SCEWindowsUpdateProgressDialogFunc : WM_INITDIALOG. Message Type 1: Finished searching for new updates Message Type 1: Updates available: : 0 Message Type 2: CBootStrapper::LaunchSetup : Setup update was successful Message Type 2: Launching EXE : C:\Documents and Settings\susvadmn\Local Settings\Application Data\SCE\setup.exe Message Type 2: CBootStrapperBase::LaunchExeAndWait : Starting... Message Type 2: CBootStrapperBase::LaunchExeAndWait : Finished... Message Type 2: CommonWinMain : Main returned success"
June 14th, 2010 4:21pm

Hello, That's really a strange issue. I cannot find any related error message. To resolve this issue, you may contact CSS to start a case. Online Assisted Support Options http://support.microsoft.com/select/default.aspx?target=assistance&c1=508&GSSProdSelMore508 Microsoft System Center Essentials 2007 https://support.microsoft.com/oas/default.aspx?&c1=508&gprid=12684 Hope it helps, Yog Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
June 16th, 2010 6:26am

Hello, That's really a strange issue. I cannot find any related error message. To resolve this issue, you may contact CSS to start a case. Online Assisted Support Options http://support.microsoft.com/select/default.aspx?target=assistance&c1=508&GSSProdSelMore508 Microsoft System Center Essentials 2007 https://support.microsoft.com/oas/default.aspx?&c1=508&gprid=12684 Hope it helps, Yog Li - MSFT
June 16th, 2010 6:26am

Hello, That's really a strange issue. I cannot find any related error message. To resolve this issue, you may contact CSS to start a case. Online Assisted Support Options http://support.microsoft.com/select/default.aspx?target=assistance&c1=508&GSSProdSelMore508 Microsoft System Center Essentials 2007 https://support.microsoft.com/oas/default.aspx?&c1=508&gprid=12684 Hope it helps, Yog Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
June 16th, 2010 1:26pm

Hello, did you have any progress on this ? I've exactly the same problem, trying to upgrade (inplace) a perfectly working Sce2007 Sp1 memeber server. In the SCESetupWizard.log i see: 12:51:24:We could not verify two way trust. 12:53:42:We cannot Contact and/or interact with Active Directory. and later: 01:11:03:Application Ended: CurrentUserForestNotInTwoWayTrustRelationshipWithComputerForest But AD is perfectly working (otherwise my 300+ users would complain ..), I'm using the same DomainAdmin+LocalAdmin account I've used to installa Sce2007 in the past. Things to note in my setup: The domain is a child domain in a more complicated forest tree The NetBios domain name is DIFFERENT than the left part of the domain FQDN I've no rights in the Forest Root, but full rights in the loacl domain Basically it detects correctly everything (previous Sce2007 Setup, SQL and versions, domain ...) but won't work. Any suggestions ? Bye, ClaudioMCSA, MCSE, MCT
July 7th, 2010 7:42am

Hello, did you have any progress on this ? I've exactly the same problem, trying to upgrade (inplace) a perfectly working Sce2007 Sp1 memeber server. In the SCESetupWizard.log i see: 12:51:24:We could not verify two way trust. 12:53:42:We cannot Contact and/or interact with Active Directory. and later: 01:11:03:Application Ended: CurrentUserForestNotInTwoWayTrustRelationshipWithComputerForest But AD is perfectly working (otherwise my 300+ users would complain ..), I'm using the same DomainAdmin+LocalAdmin account I've used to installa Sce2007 in the past. Things to note in my setup: The domain is a child domain in a more complicated forest tree The NetBios domain name is DIFFERENT than the left part of the domain FQDN I've no rights in the Forest Root, but full rights in the loacl domain Basically it detects correctly everything (previous Sce2007 Setup, SQL and versions, domain ...) but won't work. Any suggestions ? Bye, ClaudioMCSA, MCSE, MCT
Free Windows Admin Tool Kit Click here and download it now
July 7th, 2010 7:42am

Hello, did you have any progress on this ? I've exactly the same problem, trying to upgrade (inplace) a perfectly working Sce2007 Sp1 memeber server. In the SCESetupWizard.log i see: 12:51:24:We could not verify two way trust. 12:53:42:We cannot Contact and/or interact with Active Directory. and later: 01:11:03:Application Ended: CurrentUserForestNotInTwoWayTrustRelationshipWithComputerForest But AD is perfectly working (otherwise my 300+ users would complain ..), I'm using the same DomainAdmin+LocalAdmin account I've used to installa Sce2007 in the past. Things to note in my setup: The domain is a child domain in a more complicated forest tree The NetBios domain name is DIFFERENT than the left part of the domain FQDN I've no rights in the Forest Root, but full rights in the loacl domain Basically it detects correctly everything (previous Sce2007 Setup, SQL and versions, domain ...) but won't work. Any suggestions ? Bye, ClaudioMCSA, MCSE, MCT
July 7th, 2010 2:42pm

I had this problem, and solved it simply by logging on to the machine as a domain user (well, domain admin - but a domain user with local admin should work as well). Before, I was logged on as local admin only.
Free Windows Admin Tool Kit Click here and download it now
August 7th, 2010 12:33am

We opened a case with Microsoft [REG:110072832501507], but for the moment no progress at all. If we get a solution I'll post it ... Bye Claudio MCSA, MCSE, MCT
August 9th, 2010 8:37am

We opened a case with Microsoft [REG:110072832501507], but for the moment no progress at all. If we get a solution I'll post it ... Bye Claudio MCSA, MCSE, MCT
Free Windows Admin Tool Kit Click here and download it now
August 9th, 2010 8:37am

It's not our case, we are already using a Domain Admin account. Cheers ClaudioMCSA, MCSE, MCT
August 9th, 2010 8:39am

It's not our case, we are already using a Domain Admin account. Cheers ClaudioMCSA, MCSE, MCT
Free Windows Admin Tool Kit Click here and download it now
August 9th, 2010 8:39am

We opened a case with Microsoft [REG:110072832501507], but for the moment no progress at all. If we get a solution I'll post it ... Bye Claudio MCSA, MCSE, MCT
August 9th, 2010 3:37pm

It's not our case, we are already using a Domain Admin account. Cheers ClaudioMCSA, MCSE, MCT
Free Windows Admin Tool Kit Click here and download it now
August 9th, 2010 3:39pm

We are running Bind DNS on our network and it was causing the error. We changed our DNS settings on the SCE server to the IP addresses of 2 of our domain controllers and it fixed the problem. This actually fixed several problems we had been having in newer Microsoft Applications and Operating Systems.
September 16th, 2010 12:22am

In my case I was using DHCP to get an IP address for my server. Changing to a fix address solved the "could not connect to a domain"-error for me. The message could be more verbose or descriptive, though... Bye Ali
Free Windows Admin Tool Kit Click here and download it now
September 17th, 2010 7:14pm

I solved the problem by switching windows firewall off.
October 14th, 2011 8:40am

I solved the problem by switching windows firewall off.
Free Windows Admin Tool Kit Click here and download it now
October 14th, 2011 8:40am

I solved the problem by switching windows firewall off.
November 19th, 2011 9:24am

Hi All, Just recently I tried installing SCE on a windows server 2008 R2, and I was having the same problem with CluadioG64, having the same entries in my logs: ...We could not verify two way trust. ...We cannot Contact and/or interact with Active Directory. ...was this issue resolved already? thanks...
Free Windows Admin Tool Kit Click here and download it now
December 7th, 2011 8:56am

Hi All, Just recently I tried installing SCE on a windows server 2008 R2, and I was having the same problem with CluadioG64, having the same entries in my logs: ...We could not verify two way trust. ...We cannot Contact and/or interact with Active Directory. ...was this issue resolved already? thanks...
December 7th, 2011 8:56am

Hi All, Just recently I tried installing SCE on a windows server 2008 R2, and I was having the same problem with CluadioG64, having the same entries in my logs: ...We could not verify two way trust. ...We cannot Contact and/or interact with Active Directory. ...was this issue resolved already? thanks...
Free Windows Admin Tool Kit Click here and download it now
December 7th, 2011 8:56am

Hi all, This is rather strange and I had no time to investigate it but I managed to install SCE 2010 in a test environment similar to my client's environment. They are in a child domain, the administrator has domain admin credentials but no enterprise admin credentials. What I did in my test environment were as follows: 1. Log-in as enterprise admin to check if there was connectivity to the parent domain from the child domain - successful 2. Logged out and logged in again as domain admin for the child domain 3. Installed SCE 2010 - successful I'm still asking for an enterprise admin to install SCE 2010 in the production environment and hopefully this gets done. I'll keep you posted if everything goes well...Thanks...
December 18th, 2011 1:55am

Hi all, This is rather strange and I had no time to investigate it but I managed to install SCE 2010 in a test environment similar to my client's environment. They are in a child domain, the administrator has domain admin credentials but no enterprise admin credentials. What I did in my test environment were as follows: 1. Log-in as enterprise admin to check if there was connectivity to the parent domain from the child domain - successful 2. Logged out and logged in again as domain admin for the child domain 3. Installed SCE 2010 - successful I'm still asking for an enterprise admin to install SCE 2010 in the production environment and hopefully this gets done. I'll keep you posted if everything goes well...Thanks...
Free Windows Admin Tool Kit Click here and download it now
December 18th, 2011 1:55am

Hi all, This is rather strange and I had no time to investigate it but I managed to install SCE 2010 in a test environment similar to my client's environment. They are in a child domain, the administrator has domain admin credentials but no enterprise admin credentials. What I did in my test environment were as follows: 1. Log-in as enterprise admin to check if there was connectivity to the parent domain from the child domain - successful 2. Logged out and logged in again as domain admin for the child domain 3. Installed SCE 2010 - successful I'm still asking for an enterprise admin to install SCE 2010 in the production environment and hopefully this gets done. I'll keep you posted if everything goes well...Thanks...
December 18th, 2011 1:55am

Hi, in my case it was "resolved" opening the firewalls that was blocking communication between the SCE server in the child domain (totally contained in a dedicated site, where we were running with full privilege) and the forest root. It appears that even if you are domain admin in a child domain, SCE during setup tries to contact directly the forest root domain controllers, which in our case was not permitted (only local DC's could connect to corporate-root DCs). Once the communication was opened, setup went fine. When setup was finished we could revert back to the corporate firewall defaults, since no communication will be tried toward forest roots during normal SCE operations, but if you need to add components (or even install a SCE Service Pack - if any) , you'll have to do it again. Bye, ClaudioMCSA, MCSE, MCT
Free Windows Admin Tool Kit Click here and download it now
December 20th, 2011 5:45am

Hi Claudio, Thanks for the post, I'll be asking the network admin then to create a policy in there PIX and ISA just for this SCE server and hopefully it works...Thanks again...
December 21st, 2011 3:11am

Hi Claudio, Thanks for the post, I'll be asking the network admin then to create a policy in there PIX and ISA just for this SCE server and hopefully it works...Thanks again...
Free Windows Admin Tool Kit Click here and download it now
December 21st, 2011 3:11am

Hi Claudio, Thanks for the post, I'll be asking the network admin then to create a policy in there PIX and ISA just for this SCE server and hopefully it works...Thanks again...
December 21st, 2011 3:11am

Hi Claudio, A most wonderful day to you. Everything went well after the firewall was opened for the SCE server and my client is very very happy considering the fact that he wanted this tool very badly for support. All my deliverables were finally delivered. Coming from a fellow professional and MCT, I can't thank you enough for the great help and hopefully I can return the favor someday. In Richness, Michael MCP/MCT/MCDST/MCSA: Messaging+Security/MCSE:Messaging+Security/MCTS:WSS 3.0+MOSS 2007+Vista/ MCITP:Enterprise Technician+Server Administrator+Enterprise Administrator/CEI/CEH/Linux+/Security+/ Network+
Free Windows Admin Tool Kit Click here and download it now
December 22nd, 2011 3:47am

Hi Claudio, A most wonderful day to you. Everything went well after the firewall was opened for the SCE server and my client is very very happy considering the fact that he wanted this tool very badly for support. All my deliverables were finally delivered. Coming from a fellow professional and MCT, I can't thank you enough for the great help and hopefully I can return the favor someday. In Richness, Michael MCP/MCT/MCDST/MCSA: Messaging+Security/MCSE:Messaging+Security/MCTS:WSS 3.0+MOSS 2007+Vista/ MCITP:Enterprise Technician+Server Administrator+Enterprise Administrator/CEI/CEH/Linux+/Security+/ Network+
December 22nd, 2011 3:47am

Hi Claudio, A most wonderful day to you. Everything went well after the firewall was opened for the SCE server and my client is very very happy considering the fact that he wanted this tool very badly for support. All my deliverables were finally delivered. Coming from a fellow professional and MCT, I can't thank you enough for the great help and hopefully I can return the favor someday. In Richness, Michael MCP/MCT/MCDST/MCSA: Messaging+Security/MCSE:Messaging+Security/MCTS:WSS 3.0+MOSS 2007+Vista/ MCITP:Enterprise Technician+Server Administrator+Enterprise Administrator/CEI/CEH/Linux+/Security+/ Network+
Free Windows Admin Tool Kit Click here and download it now
December 22nd, 2011 3:47am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics