ESXi Host fails to join AD Domain "Errors in Active Directory operations"

Products

• VMware vSphere ESXi 7.0
• VMware vSphere ESXi 8.0

Issue/Introduction

• Adding ESXi host to Active Directory, fail with "Errors in Active Directory operations" in the Tasks/Events
• Running a Packet Capture during a recreation of the issue will result with the following error.

  • 2032 13:03:07.630056 XX.XX.X.XX XX.XX.XXX.XX DCERPC 182 Fault: call_id: 105, Fragment: Single, Ctx: 0, status: nca_s_fault_access_denied 445 23744

Environment

• Active Directory 

Cause

• Information from Microsoft
  • net user /domain returns "Access is denied"
  • Network access: Restrict clients allowed to make remote calls to SAM
• The account being used to join the hosts to the domain is missing RPC rights on the domain controller.

Resolution

To Work Around this issue use an account with a higher level Admin account.

• The article below will address the permissions issue 
  Network access: Restrict clients allowed to make remote calls to SAM