Skip to main content

Computer is not a member of the root domain. For security reason, this action must be run in a root domain computer.

Issue: Unable to run ForestPrepare task for Lync Server 2013 deployment.
Error Message: Task execution failed.
Computer is not a member of the root domain. For security reason, this action must be run in a root domain computer.
Actual error:  
Problem Statement:
I had updated Schema and was preparing forest for Lync Server 2013 deployment however receiving above error. Installation Lync on child domain so preparing forest from child domain only however receive above error and not allowing to update forest.
Per requirement want to update forest from Lync server which was member of child domain. Running forest prepare from child domain and getting above errors. When click on error details found that forest preparation must run from root domain only.
Error details: 
I thought to run forest preparation from domain controller however this is quite lengthy work because I have to run Lync setup on DC or root server then run forest prepare. Later remove the setup. All this are lengthy work.
Instead of running forest preparation from DC or Root domain server and do all above lengthy work I can join my Lync Server machine to root domain and run forest preparation and later join machine to child domain.
Here are the simple steps:
1.     Login to your Server which are in child domain.

2.     Go to Server Manager > Local Server > click on domain name and remove the child domain name and keep only root domain name.

3.     Restart Server. Now server is in root domain.

4.     Now start the Lync deployment wizard and run the forest prepare.

5.     See the result.

6.     I was able to prepare forest.   
Note: Join your server to child domain to complete Lync Server 2013 installation.

Thank you.


  1. Hey Man,

    Thanks for the workaround it did solve my issue.


Post a Comment

Popular posts from this blog

Outlook Add-in for Skype meeting getting disable after restarting Outlook.

Issue: Outlook Add-in for Lync meeting getting disable after restarting Outlook.
Problem Statement: Outlook Add-ins gets install automatically when Office 2013 installs (Lync and Skype for Business clients are part of Office package). Add-ins name is Lync Meeting Scheduling Outlook Addin or Skype meeting Add-in for Microsoft Office 2013. Sometime if other add-ins conflict with Outlook add-ins then outlook add-in keep getting disabled. And user has to enable it manually after Outlook restarts. 
Resolution: By default Lync Meeting Scheduling Outlook Addin or Skype Meeting Add-in for Microsoft Office 2013 installs wit load behavior "Load at Startup". However due to some conflict users Lync or Skype add-ins load behavior get changed to loaded instead of "Load at Startup" had to re-enable Lync Meeting Add-In in each time Outlook 2013 was started as it was not set to "Load at Startup". Look at the below screenshot. Now question is how we can change load behavior …

Unable to share desktop in Skype for Business?

Unable to share desktop in Skype for Business?
You can show your entire desktop or just a program to everyone in a Skype for Business Meeting, call, or instant messaging (IM) conversation. However sometime this feature does not work and give different errors.  Error message: ·Cannot start Desktop/Application Sharing due to network issues. ·An error occurred during the screen presentation. Resolution: There are multiple thing which may affect application/desktop sharing. 1.Make sure application / desktop sharing enabled on Skype for Business / Lync Server. SfB /Lync Control Panel > Conferencing > Conferencing policy > select Global or create new policy and set enable ‘Enable application and desktop sharing’. Refer below image. 2.Make sure your Skype for Business (Lync) client is updated with latest cumulative updates. Download latest update Skype (Lync) client. 3.Update your Video and Display drivers. a.Go to Start > Control panel. b.Search for Device Manager, and then open it. c.Find V…

Unable to login to Skype for Business client?

Unable to login to Skype for Business client? In order to sign-in on Skype (Lync) you must have login credential provided to you from your organization. ·Sign-in address: ·User name: orgname\bilag ·Password: ************
Note: is my SIP domain name. Here are the most common mistake people make while sign-in on Skype for Business (Lync).
1.If you have login credential however still unable to sign-in then make sure you are putting proper login credential. Below error shows when you are wrong entering your sign-in address:
2.If you are writing correct Sign-in address however getting DNS error then contact administrator/ Support team there may be a DNS resolution or configuration issue. Administrator need to verify the SfB (Lync) AutoDiscover DNS records. 3.Sometime users password may expired/ lockout: Make sure that you password is not expire and lockout. If yes then call to helpdesk and reset your password / unlock. 4.Make user to have updated Skype for Business cli…