Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

4
  • thank you! This helped me figure out that my domain was listed as two separate entries. Fixing that resolved my issue.
    – jabroni
    Commented Nov 18, 2022 at 14:13
  • however this also makes me wonder the other reference to my domain wasn't working. The one that it should be is DOMAIN, whereas the one that works is domain.local. On the AD server the domain name is DOMAIN.LOCAL and the Domain NetBIOS Name is DOMAIN
    – jabroni
    Commented Nov 18, 2022 at 14:15
  • A bare DOMAIN is an "Windows NT domain" name that comes from the NetBIOS-based domain system which existed before AD. Every AD domain still has a corresponding NetBIOS / NT domain name (which can have completely different spelling from the AD DNS domain name), but when joining a machine to the domain you should always use the DNS name, i.e. domain.local – support for NT-style domain joins has been gone for a few years now, so It's normal that joining a machine to DOMAIN will not work. (Once the machine is joined though, console logins can still use DOMAIN\user though.) Commented Nov 18, 2022 at 14:29
  • As for DOMAIN.LOCAL, if it's shown in klist then it is actually the Kerberos realm name, which is case-sensitive and traditionally the uppercase version of the corresponding DNS domain. So your AD domain really has three names – DNS, Kerberos, and NT, and the same AD account name can be written as [email protected] in AD UPN format, [email protected] in Kerberos principal format, and DOMAIN\user in NT format. Commented Nov 18, 2022 at 14:33