Adding a Windows domain to VMware NSX for vSphere fails with the error: Access is denied, please check whether [domain-username- password] are correct. 0x0000000

Products

• VMware NSX for vSphere

Issue/Introduction

Symptoms:

• When attempting to register a Windows domain with NSX Manager, registration fails
• You observe one or both of these errors:
  
  
• Error happened, 0xc0000061
• Authentication to host [DC] with username username failed, Access is denied, please check whether [domain-username-password] are correct. 0x00000005

Environment

VMware NSX for vSphere 6.2.x
VMware NSX for vSphere 6.1.x

Cause

This issue occurs due to problems with permissions on the listed domain controller. The domain credential in use must be allowed to read the Windows security event logs.

For more information, see the Register a Windows Domain with NSX Manager section in the NSX for vSphere Administration guide.

Resolution

This is an expected behavior when a Windows domain account with lesser permissions is supplied. To register, enter a domain account with the correct permissions.

 

Note: You may also have to configure the user account for the Manage Audit and Security Logs privilege under Local Security Policy > User Rights Assignment on the Domain Controller.

Additional Information