Loading

×Sorry to interrupt
CSS Error

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

Unable to add permissions to an Active Directory user on an ESXi 4.1 host joined to an Active Directory domain (1036554)

Last Updated: 3/20/2024Categories: TroubleshootingTotal Views: 7097Language:
Chinese (Simplified)JapaneseEnglish

Subscribe to get an email
newsletter with new updates

Please provide article feedback:

Symptoms

After joining an ESXi host to an Active Directory (AD) domain, you experience these symptoms:

The ESXi Admins group is not automatically assigned the Administrator role in the Permissions tab even though the ESXi Admins group exists in the AD domain.

When trying to assign a role to an AD user, you see that:

When you click Add in the Assign Permissions windows, you are able to choose the correct AD domain from the Domain dropdown.

A proper list of AD users and groups is displayed in the Users and Groups pane.

Entering an AD user or group in the Search field and clicking the Search button finds the appropriate user or group.

An AD user or group can be added to the list of Users or Groups, but clicking OK reports the error:

The following names were not found: <domain>\<user>.

If you have enabled logging for the lsassd daemon, the lsassd log file reports errors similar to:

20110316210752:DEBUG:0xff996b90:[LsaSrvFindUserByName() /build/mts/release/bora-301967/likewise/esxi-esxi/src/linux/lsass/server/api/users.c:109] Error code: 40008 (symbol: LW_ERROR_NO_SUCH_USER)
20110316210752:VERBOSE:0xff996b90:[LsaSrvFindUserByName() /build/mts/release/bora-301967/likewise/esxi-esxi/src/linux/lsass/server/api/users.c:140] Failed to find user by name (name = 'sysman\jgray') -> error = no such entry, client pid = 0
Note: For information on enabling logging for the lsassd daemon, see Enabling logging for Likewise agents on ESX/ESXi 4.1.

Cause

This issue may occur if a preferred domain controller has been set in the Advanced Settings on the ESXi host.

Resolution

To resolve this issue, enter the AD domain name in the Domain: field and click Join Domain.

To enter the AD domain name in the Domain: field and click Join Domain.

In the vSphere Client, click the Configuration tab for the ESXi host.

Click the Advanced Settings link under Software. The Advanced Settings window appears.

Click the UserVars item in the left pane.

The second parameter listed should be UserVars.ActiveDirectoryPreferredDomainControllers. If there is a value set for this parameter, delete it and then click OK.

In the Configuration tab, click Software > Authentication Services.

Click the Properties link at the top right.

Click Leave Domain.

Click OK in the Leave Domain Warning window.

Click OK.

Click the Properties link at the top right of the Authentication Services Settings window.

Select Active Directory from the Select Directory Service Type dropdown.

Enter the AD domain name in the Domain: field and click Join Domain.

Enter appropriate AD credentials when prompted.

Note: If your problem still exists after trying the steps in this article, please file a support request with VMware Support and note this Knowledge Base article ID (1036554) in the problem description. For more information, see How to Submit a Support Request.

Related Information

Active Directory ドメインに結合された ESXi 4.1 ホストで Active Directory ユーザーに権限を追加できない
在已加入 Active Directory 域的 ESXi 4.1 主机上无法向 Active Directory 用户添加权限

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
Chinese (Simplified)JapaneseEnglish

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

KB
•
La conexión al servidor remoto no es posible mientras se descargan los complementos de vCenter Update Manager o Converter (1004887)

KB
•
Não é possível se conectar ao servidor remoto ao baixar o vCenter Update Manager ou plug-ins do Converter (1004887)

KB
•
vSphere 5.5 で変更ブロックのトラッキングを有効にすると失敗する (2075984)

KB
•
vRealize Operations Management と VMware vCloud Suite のライセンス、価格とパッケージ情報 (2052829)

Results 1-5 of 5

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware vSphere ESXi

Related Versions:

VMware ESXi 4.1.x Installable

VMware ESXi 4.1.x Embedded

Take Our Survey

Support Assistant