Cannot add user from Active Directory

  • After installing Active Directory, I cannot add a new login using the AD domain.   Although I can browse the domain and select a user from the "SQL Server Login Properties - New Login" dialog, I get "Error 15401: Windows NT user or group 'MyDomain\MyUser' not found.".  What gives?

  • This was removed by the editor as SPAM

  • If you go the the EM server Properties, there's an Active Directory tab, where you can:

    "Add this instance of SQL Server to Active Directory"

    I'm not sure if this will fix your problem or not, but it's an idea.

  • That shouldn't be needed for what the poster is trying to do. That registers the server in AD which allows others to find it. Also necessare to generate the SPN for Kerberos delegation, if I remember right.

    K. Brian Kelley
    @kbriankelley

  • See if any of the following applies:

    How to troubleshoot error 15401 (324321)

    Also verify that the time on the SQL Server is within 5 minutes of the time on the DCs. It should be synchronized automatically except in those cases where the time is so drastically different that it isn't allowed unless someone manually intervenes.

    K. Brian Kelley
    @kbriankelley

  • Went through the troubleshooting tips before posting here.  The time check should be irrelevant because the SQL Server and the DC are on the same machine.  Adding the SQL Server to the Active Directory didn't make any difference.

  • I seem to remember a KB article that covered this exact situation however I'm having no success at finding it. There are issues with SQL Servers on DCs but I don't remember the workarounds off hand. I'll keep looking.

    K. Brian Kelley
    @kbriankelley

  • I had this error because the TCP/IP NETBIOS helper (NetBT) service was disabled. I reenabled it and add the user without any problem.

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply