Domain Join fail error while launching Admin EC2 for managed directory

0

Hello, we have launch our Directory Service and trying to launch Admin Ec2 instance to manage The users and all, but when we start the execution to launch admin EC2 instance it is failing on the step of domain join, and giving following error,

Step fails when it is verifying the command has completed. Command b1de3f81-5da6-4fc2-a199-f2426c67cf46 returns unexpected invocation result: {Status=[Failed], ResponseCode=[1], Output=[status:Failed, code:0, message:Domain Join failed, ComputerName:EC2AMAZ-0DB4A8N; Message:A WebException with status ConnectFailure was thrown.; ErrorCode:; ErrorType:Amazon.Runtime.AmazonServiceException; StatusCode:0, error: Domain join failed. ----------ERROR------- Failed to create domain computer account 'EC2AMAZ-0DB4A8N', Message=A WebException with status ConnectFailure was thrown.,ErrorCode=,ErrorType=Sender,StatusCode=0 Amazon.Runtime.AmazonServiceException: A WebException with status ConnectFailure was thrown. ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 52.95.35.27:443


Though my Directory and instance are in same private subnet.

can anyone please help me to debug the actual cause of this issue?

1 個回答
0

Hello.

If you look closely at the error, it's accessing a public IP address.
This makes me think that even though they are in the same subnet, they are accessing the domain via the public IP.
Therefore, I think you can use it by configuring the private subnet to access the public Internet using something like NAT Gateway.

52.95.35.27:443
profile picture
專家
已回答 6 個月前
  • So, the thing is actually we do not have public access, our environment needs be in private subnet only

  • Did you set the DNS name of the directory specified for Microsoft AD in the DHCP option set and the DNS address of Microsoft AD for the domain name server? https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html

  • Sorry, i am not that aware about this, but when i do create this in my environment does it affect any other resources in my VPC?

  • Yes, EC2 running within the VPC will now query the DNS server configured in the DHCP option set.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南