Unable to join CIFS server to a new domain

Applies to

• ONTAP 9
• Active Directory
• Domain Controller (DC)
• CIFS

Issue

• Unable to join CIFS server to a domain
• Unable to modify the CIFS server and add it to a new domain 

Cluster01::> vserver cifs modify -vserver SVM01 -domain netapp.com

In order to create an Active Directory machine account for the CIFS server, you must supply the name and password of a Windows account with sufficient privileges to add computers to the "CN=Computers" container within the "netapp.com"
domain.

Enter the user name: administrator

Enter the password:

Error: Machine account creation procedure failed
  [ 10858] Loaded the preliminary configuration.
  [ 10892] Created a machine account in the domain
  [ 10910] SID to name translations of Domain Users and Admins
           completed successfully
  [ 10916] Successfully connected to ip xxx.xxx.xxx.xxx, port 464 using
           TCP
  [ 10949] Kerberos password set for 'SVM-CIFS$@netapp.com'
           succeeded
  [ 10949] Set initial account password
  [ 10955] Successfully connected to ip xxx.xxx.xxx.xxx, port 445 using
           TCP
  [ 10974] Successfully authenticated with DC
           demo.netapp.com
  [ 13979] Unable to connect to NetLogon service on
           demo.netapp.com (Error:
           RESULT_ERROR_SPINCLIENT_COMMAND_TIMED_OUT)
**[ 13979] FAILURE: Unable to make a connection
**         (NetLogon:netapp.com), result: 6776
  [ 13979] Unable to make a NetLogon connection to
           demo.netapp.com using the new machine account
  [ 13986] Deleted existing account
           'CN=Computers,DC=netapp,DC=com'

Error: command failed: Failed to create the Active Directory machine account "SVM-CIFS". Reason: Command timed out.