【問題描述】
租戶管理平臺發佈桌面時，進度卡在90%，一段時間後，提示發佈失敗，報錯：
DaaSAgent, Failed to join domain .(54b). Error: 指定的域不存在，或無法聯繫。
或：When a Tenant admin is expanding a pool, the tasks fail at 90% because the domain join step fails.
如下圖：
【問題分析】
1）登錄後臺發佈失敗桌面虛擬機，系統報錯：請求加入域失敗，錯誤代碼1355；
2）登錄都發布失敗的桌面虛擬機，查看sysprep日誌，C:\Windows\System32\sysprep\Panther\setuperr.log.；你可能看到一下報錯信息：
2010-11-30 14:16:51, Error [DJOIN.EXE] Unattended Join: NetJoinDomain failed error code is [2202]
2010-11-30 14:16:51, Error [DJOIN.EXE] Unattended Join: Unable to join; gdwError = 0x89a
2010-11-30 12:36:41, Error [DJOIN.EXE] Unattended Join: NetJoinDomain failed error code is [1355]
2010-11-30 12:36:41, Error [DJOIN.EXE] Unattended Join: Unable to join; gdwerror = 0x54b
2010-11-30 10:46:53, Error [DJOIN.EXE] Unattended Join: NetJoinDomain failed error code is [1326]
2010-11-30 10:36:53, Error [DJOIN.EXE] Unattended Join: Unable to join; gdwerror = 0x52e
Error 1326: Logon failure: unknown user name or bad password. Typically this error signifies a bad username or password mis-match.
Error 1355: The specified domain either does not exist or could not be contacted. Typically this error signifies network, DNS, or WINS issues.
Error 2202: You specified an invalid user name or group name.Typically this error signifies an invalid (incorrect format) username is being used. This can happen if you use a third party utility that creates the unattended.xmlfile used by sysprep.
3）查看C:\Windows\Panther\UnattendGC下的setuperr.log和setupacct.log日誌，
4）查看C:\Windows\debug\NetSetup.LOG日誌，改日誌可提供詳細的關於域加入的信息，以幫助進一步排查問題，搜索NetpDoDomainJoin字段定位，如下所示：
11/30/2010 14:09:48:654 NetpDoDomainJoin
11/30/2010 14:09:48:654 NetpMachineValidToJoin: SERVER01
11/30/2010 14:09:48:654 OS Version: 6.1
11/30/2010 14:09:48:654 Build number: 7600 (7600.win7_rtm.090713-1255)
11/30/2010 14:09:48:701 SKU: Windows Server 2008 R2 Enterprise
11/30/2010 14:09:48:701 NetpDomainJoinLicensingCheck: ulLicenseValue=1, Status: 0x0
11/30/2010 14:09:48:701 NetpGetLsaPrimaryDomain: status: 0x0
11/30/2010 14:09:48:701 NetpMachineValidToJoin: status: 0x0
11/30/2010 14:09:48:701 NetpJoinDomain
11/30/2010 14:09:48:701 Machine: SERVER01
11/30/2010 14:09:48:701 Domain: domain.com\dc1.domain.com
11/30/2010 14:09:48:701 MachineAccountOU: (NULL)
11/30/2010 14:09:48:701 Account: domain.com\domain1\addwks
11/30/2010 14:09:48:701 Options: 0x23
11/30/2010 14:09:48:701 NetpLoadParameters: loading registry parameters…
11/30/2010 14:09:48:701 NetpLoadParameters: DNSNameReRequired not found, defaulting to ‘1’ 0x2
11/30/2010 14:09:48:701 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to ‘0’ 0x2
11/30/2010 14:09:48:701 NetpLoadParameters: status: 0x2
11/30/2010 14:09:48:701 NetpValidateName: checking to see if ‘domain.com’ is valid as type 3 name
11/30/2010 14:09:48:810 NetpCheckDomainNameIsValid [ Exists ] for ‘domain.com’ returned 0x0
11/30/2010 14:09:48:810 NetpValidateName: name ‘domain.com’ is valid for type 3
11/30/2010 14:09:48:810 NetUseAdd to \dc1.domain.com\IPC$ returned 87
11/30/2010 14:09:48:810 NetUseAdd bad parameter is 5
11/30/2010 14:09:48:810 NetpJoinDomain: status of connecting to dc ‘\dc1.domain.com’: 0x89a
11/30/2010 14:09:48:810 NetpJoinDomainOnDs: Function exits with status of: 0x89a
11/30/2010 14:09:48:810 NetpDoDomainJoin: status: 0x89a
通過上述日誌還可以初步判斷相關的網絡問題，來判斷是否可正常連接到域。
5）登錄到 primary tenant appliance（TA）
查詢確認域控信息和端口，執行以下命令：
psql -U admin -d fdb -c ‘select port, directory_server_ips from domain;’
對查出的相關端口檢測，確保通信正常：
telnet
端口不通：telnet: Unable to connect to remote host: Connection refused
如果網絡不通，請先排查網絡問題
6）如果日誌報username, password or permissions問題，請先確認加入域的認證信息正確；
6.1>請嘗試手動加入域；
6.2>如手動加入域失敗，修改密碼後重試；
7）確人域的安全上下文和後綴正確：
登錄TA的fabric database執行:
psql -U admin -d fdb -c ‘select name, context, domain_suffix from domain’;
如果查出的與實際不匹配，執行：
psql -U admin -d fdb -c -update domain set =’’ where name=’<value from 2b>’;
來更i性能域控信息，然後再嘗試擴展桌面池。
成功後截圖圖下：
