When trying to join an Active Directory domain, adjoin fails, after a delay of up to a few minutes, with the error:

Kerberos set password failed

Resolution / Workaround

Verify that there are no firewall rules getting in the way of communication with Active Directory. Upgrading your AD infrastructure can add additional firewall port requirements.

Verify that port 464 TCP and UDP is allowed between the client and the AD infrastructure.

You can read more about Active Directory firewall port configuration at:


Still have questions? We can help. Submit a case to Technical Support.

Last Modified On: June 28, 2019