Error message when you use the "netdom query" command in Windows Server 2003 Service Pack 1: "The requested API is not supported on the remote server" (914044)



The information in this article applies to:

  • Microsoft Windows Server 2003 SP1, when used with:
    • Microsoft Windows Server 2003, Standard Edition
    • Microsoft Windows Server 2003, Enterprise Edition
    • Microsoft Windows Server 2003, Standard x64 Edition
    • Microsoft Windows Server 2003, Enterprise x64 Edition

SYMPTOMS

You are using a computer that is running Microsoft Windows Server 2003 with Service Pack 1 (SP1). You run the following command to query the domain for the list of the organizational units (OU) where you have permissions to create a computer object:

netdom query /domain:domain_name OU

After you do this, you cannot run the same command on a Windows Server 2003-based domain controller. Additionally, you may receive both of the following error messages.

Error message 1

The requested API is not supported on the remote server

Error message 2

The command failed to complete successfully
Note Other netdom query command parameters work on the domain controller.

CAUSE

This problem occurs because of attack surface reduction code that is included in Windows Server 2003 SP1. This code prevents the NetGetJoinableOUs function from running on Windows Server 2003 SP1-based domain controllers. This problem occurs because the Netdom query command uses the NetGetJoinableOUs function.

WORKAROUND

To resolve this problem, run the following command on a member server instead of on a domain controller:

netdom query /domain:domain_name OU

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Modification Type:MinorLast Reviewed:3/2/2006
Keywords:kbtshoot kbprb KB914044 kbAudITPRO