My WDS deployment runs the answer file, but the finished Windows 11 machine has a different name from the computer object WDS created and remains in a workgroup. The object appears in the intended OU. Where should I start looking?
Why isn't my Windows 11 WDS deployment joining the domain?
Asked by
luggage tag collector
Answers
Start with the domain join logs on the deployed machine, especially netsetup.log and any netsetup.err. Also check the Panther setup logs for errors during the specialize pass. They should help distinguish a failed join attempt from join settings that never got applied.
The computer object existing in the intended OU doesn't prove that the installed OS joined it. Compare the name in the join logs with both the WDS-created object and the name Windows ended up using.
Reply to this answer
Check the answer file against the exact Windows image you're deploying in Windows System Image Manager. Validate it and look closely at the computer name and domain join settings, including which configuration pass they're assigned to. A file can run through much of setup while a particular setting is missing or invalid.
Reply to this answer
Account reuse is worth checking, but only if the logs show Windows trying to reuse an existing computer account. There are domain join hardening rules and permissions that can affect reuse. Don't assume that's the problem just because WDS created an object.
Reply to this answer
Also review the WDS hands-free deployment hardening guidance for CVE-2026-0386. Check whether the deployment and domain join configuration meets the guidance for your environment rather than assuming the existing WDS settings are sufficient.
Reply to this answer
Add your answer
Answers are reviewed before publication.
luggage tag collector:
I delete the newly created object after each deployment, so the next attempt starts without that object. WDS still creates a new one during deployment.
4b~hinge_67:
That makes the join logs especially useful. Check whether the join attempt refers to the object WDS just created or to the different name assigned to Windows.