CompTIA Server+ (SK0-005)TroubleshootingMedium
A server administrator is troubleshooting a Windows Server that is unable to join a new Active Directory domain. The server receives the error 'The specified domain either does not exist or cannot be contacted.' The administrator has verified that the domain controller is online and reachable via `ping` by IP address. Which of the following is the MOST likely cause of this issue?
- AIncorrect subnet mask on the server
- BFirewall blocking SMB ports
- CDNS server misconfiguration on the server
- DDefault gateway misconfiguration on the server
Show answer & explanationAnswer & explanation
Correct answer: C. DNS server misconfiguration on the server
The ability to `ping` the domain controller by IP address rules out basic network connectivity issues (incorrect subnet mask, default gateway). However, joining an Active Directory domain relies heavily on DNS for locating domain controllers and services. If the server cannot resolve the domain controller's hostname or SRV records, it will report that the domain cannot be found or contacted, making DNS server misconfiguration the most likely culprit.
Why the other options are wrong
- A. Incorrect subnet mask would likely prevent pinging the DC by IP if they are on different subnets.
- B. While firewalls can block domain join, the error message 'domain does not exist or cannot be contacted' specifically points to a name resolution or discovery issue, not necessarily a port block after discovery. Also, ping by IP works, suggesting basic network access.
- D. Default gateway misconfiguration would prevent communication to other subnets, but pinging by IP works, so this is ruled out.
Active Directory DNS Dependency
Active Directory relies heavily on DNS for service location (SRV records), name resolution, and authentication, making correct DNS configuration critical for domain operations.
- Domain controllers register SRV records in DNS.
- Clients use DNS to find DCs for authentication and services.
- Incorrect DNS settings prevent domain join and logon.
Memory trick: DNS is the map to the domain's door.