Unable to add domain users to Windows 7
Hi all,I have a problem and wish someone can help.I installed a Windows 7 (Build 7100)on a computer and have successfully added it to a Windows 2000 AD domain. I then tried to add a domain user to the computer as a Standard User. I did the following: -1. Start Control Panel.2. SelectUser Accounts icon.3. The User Account window appears.4. In the middle of the window, click Manage User Accounts.5. The User Accounts window appears.6. Select Users tab.7. Click Add button.8. The Add New User window appears.9. In User name text box, type the domain username.10. In Domain text box, type the domain name.11. Click Next12. In What level of access do you want to grant this user pane, select Standard user radio button.13. Click Finish.14. An User Accounts dialog box appears with the following message: -The user could not be added because the following error has occurred:The trust relationship between this workstation and the primary domain failed.Does anyone know what may be causing this problem? Any suggesttion is appreciated.Regards,CapNig.
June 11th, 2009 11:26pm

If the computer is joined to the domain, DNS is properly configured, and you can communicate with a domain controller you do not have to add domain users as a local user. You just need to logon with the domain user account. At the logon screen pick Switch user. For the account name specify the domain user account in the following format: domain\user where domain is the NETBIOS name of the domain. You can add domain users to local groups (like Administators) but you can't make a domain user a local user.Kerry Brown MS-MVP - Windows Desktop Experience
Free Windows Admin Tool Kit Click here and download it now
June 12th, 2009 6:01am

Kerry,Thank you for the reply. Your suggestion worked. After logging into Windows 7 with the domain account, I did the following: -1. Start Control Panel.2. SelectUser Accounts icon.3. The User Account window appears.4. In the middle of the window, click Manage User Accounts.5. The User Account Control window appears.6. Provide the local administrator username and password.7. Click Yes.5. The User Accounts window appears.6. Select Users tab.7. Click Add button.8. The Add New User window appears.9. In User name text box, type the currently logged on user domain username.10. In Domain text box, type the domain name.11. Click Next12. In What level of access do you want to grant this user pane, select a desired option, e.g.Administrator radio button.13. Click Finish.14. You are returned to User Accounts window and the currently logged on user is now listed in the Users for this computer list box as follows: -UserName Domain Group<username> <domain_name> AdministratorsThis is the result I want to achieve in the first place. It is certainly different from Windows XP and Windows Vista. Do you know whether this is by design?Regards,CapNig
June 12th, 2009 6:08pm

You can add domainusers to local groups exactly the same as in Windows 2000, XP, and Vista. Right click on Computer and pick Manage. Expand Local Users and Groups. Add domain users into whatever local groups you desire. I prefer this way.Kerry Brown MS-MVP - Windows Desktop Experience
Free Windows Admin Tool Kit Click here and download it now
June 12th, 2009 7:23pm

Ive been adding users since 98 & 2000 &never did it that way before. wow, this sucks.Ive been posting here trying to find out how to do this, add a domain user:http://social.technet.microsoft.com/Forums/en-US/w7itpronetworking/thread/8ac679e7-94a1-4e52-8931-165f525d980e/?prof=required&ppud=4&wa=wsignin1.0 The respondents didnt know this either.Control Panel - User Accounts doesnt work. "Trust Relationship failed"You cant add the user beforehand at Computer - rtclk - Manage etc cos it shows as a SID not as a name so one cantconfirm exactlywho has been added.One has to logon as the new user (have to know their pwd or get them physically present), add Admin Tools as an option to all programs, or put Control Panel into small icons view, shft-clk on everything to try to elevate as an admin, go to Computer Management - Local Users and Groups - Groups - Administrators - rtclk props - Add user, looks good then at Apply says "Denied Access".So rtclk Desktop - Personalise, add Computer icon, rtclk it - Manage - elevate as admin - Local Users and Groups - Groups - Administrators rtclk props - etcetec and it works.unbelievable how much time this wasted.stiill, we did clear some apparently unrelated DNS errors.
July 17th, 2009 3:58am

I installed a Windows 7 (Build 7100)on a computer and have successfully added it to a Windows 2000 AD domain. I then tried to add a domain user to the computer as a Standard User. I did the following: -14. An User Accounts dialog box appears with the following message: -The user could not be added because the following error has occurred:The trust relationship between this workstation and the primary domain failed. It's SIMPLE: have the user log in first (then login as admin and add their domain account without the trust failed error!). "All things are possible, but not all things are permissible"
Free Windows Admin Tool Kit Click here and download it now
November 18th, 2009 7:51pm

It's SIMPLE: have the user log in first (then login as admin and add their domain account without the trust failed error!). Not so simple. I am here setting up a new workstation on a Sunday evening for my client. They expect to walk in on Monday morning and have Everything working. I have been doing this for 25 years and never had to do it this way before. I'm sure I'll get used to it, but it's still a pain. John
November 30th, 2009 6:18am

OK: Microsoft is not simple, but the key to success on this issue is. In general, your users should be educated that high expectations are destined to fall short of reality). It's Monday morning, so it's moot, but they won't need their domain account added locally in order to log in to the computer; only if you need them to be admin will you have to do this (which you can do today because they have now logged in that first time; a new uniqueness to Windows 7 non-home editions that are joined to a domain and need to have a domain user with elevated rights!). "All things are possible, but not all things are permissible"
Free Windows Admin Tool Kit Click here and download it now
November 30th, 2009 5:24pm

What have I missed here? Any domain user account can log into a Windows 7 workstation? I thought only users listed the Users Accounts window could log on.
January 8th, 2010 12:48am

When a computer is joined to a domain which domain users can log onto a computer is set with group policies. Normally domain users can log on to many different computers in the domain. In small domains they can usually log on to any computer in the domain. Users and computers are controlled by the domain controllers. You can still logon with the local computer accounts but you won't have access to the rest of the domain then.Kerry Brown MS-MVP - Windows Desktop Experience
Free Windows Admin Tool Kit Click here and download it now
January 8th, 2010 8:47am

I Had the same problem, I long in my admin account then add my user, set all my desktop preferences and background, etc, etc... but... when I log out or restart all my preferences are goneis like I log for 1st time alwaysso any got the same issue?
January 13th, 2010 6:42pm

This question is in the middle of an old thread. It is not clear exactly what problem you are referring to by "same problem". I recommend you start a new thread and give us a bit of detail about your problem. More people will see your question that way. This is an old thread that has been marked as answered. Few people will notice there are new posts in it.Kerry Brown MS-MVP - Windows Desktop Experience
Free Windows Admin Tool Kit Click here and download it now
January 13th, 2010 7:30pm

I Had the same problem, I long in my admin account then add my user, set all my desktop preferences and background, etc, etc... but... when I log out or restart all my preferences are goneis like I log for 1st time alwaysso any got the same issue? First, I noticed (that you used this old thread to add a new twist) and I agree with Kerry_Brown (i.e. start a new thread), and secondly, since you asked: Perhaps you changed your username (or have some other username to SID issue)? See if your home folder is not "TEMP" (i.e. look in C:\Users and see if "TEMP" has a lock on it). If so, easier to log in as another admin account and then run "regedit" (Start button, then type that in the search box and hit Enter) and then expand HKLM, Software, Microsoft, Windows NT, ProfileList, and then delete the one or two references to the account in question (that keeps pretending like it's been used for the first time)--I find it easiest to select those long references on the left (under ProfileList) and then look to the right for "C:\Users\TEMP" or "C:\Users\usernameinquestion" and then feel better about deleting (that long numbered folder on the left, under ProfileList, by right clicking and selecting Delete). Then log in as the username in question (and obviously don't panic, because that first time will be the first time you're logging in with that account; BUT, then next time should be better!). This is just one theory... "All things are possible, but not all things are permissible"
January 13th, 2010 8:10pm

THIS IS A KNOWN ISSUE CHEK http://support.microsoft.com/?id=976494
Free Windows Admin Tool Kit Click here and download it now
January 21st, 2010 5:10pm

THIS IS A KNOWN ISSUE CHECK http://support.microsoft.com/?id=976494
January 21st, 2010 5:13pm

Hi all, I have a problem and wish someone can help. I installed a Windows 7 (Build 7100) on a computer and have successfully added it to a Windows 2000 AD domain. Regards, CapNig. Hello Capnig, Can you please state categorically, step by step how you were able to add the Windows 7 pc to the Windows 200 AD Domain. I am unable to have it joined and am receiving the following error: "An attempt to resolve the DNS name of a domain controller in the domain being joined has failed. Please verify that the client is configured to reach a DNS server that can resolve DNS names in the target domain." Many thanks, Taz.
Free Windows Admin Tool Kit Click here and download it now
April 29th, 2010 10:35pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics