How to fix Error 1355 on Windows 11

by

Why This Error Happens

Error 1355 typically occurs when a Windows 11 machine cannot locate or communicate with a Domain Controller (DC) for the specified Active Directory domain. This is usually caused by incorrect DNS configuration on the client machine, as the system relies on DNS—not just NetBIOS or IP addresses—to locate domain services via SRV records. It can also result from network connectivity issues, firewall blocks, or a mistyped domain name during a join attempt.

Step-by-Step Resolution Guide

Step 1: Verify and Correct DNS Settings

  • Open Settings > Network & Internet > Wi-Fi/Ethernet > Hardware properties.
  • Ensure the Preferred DNS server is set to the internal Domain Controller’s IP address (e.g., 192.168.1.10), not a public DNS like 8.8.8.8.
  • Alternatively, use Command Prompt (Admin) to set it manually:
  netsh interface ip set dns "Ethernet" static [DC_IP_ADDRESS]

Step 2: Flush DNS Cache and Test Connectivity

  • Open Command Prompt as Administrator.
  • Run ipconfig /flushdns to clear stale cache entries.
  • Test connectivity to the domain controller using ping domain.local and nslookup domain.local.
  • If nslookup fails to resolve, the issue is confirmed to be DNS-related rather than a physical network fault.

Step 3: Check Physical Network and VPN Connectivity

  • Ensure the Windows 11 device is connected to the correct internal network or VPN if joining remotely.
  • Verify that the Ethernet cable or Wi-Fi connection is stable and hasn’t dropped to a “Limited” connectivity state.
  • If using a VPN, confirm split-tunneling rules allow traffic to the domain’s internal IP range.

Step 4: Confirm Domain Name Spelling and Firewall Rules

  • Double-check that the domain name entered in System Properties > Computer Name exactly matches the FQDN (e.g., corp.contoso.com).
  • Ensure Windows Defender Firewall (or third-party antivirus) isn’t blocking Kerberos (Port 88) or LDAP (Port 389) traffic.
  • Temporarily disable third-party firewall software to rule out software-based blocking.

Alternative or Verification Steps

  • Verification: Once DNS is corrected, retry the domain join process via Settings > Accounts > Access work or school > Connect. The machine should successfully authenticate and prompt for a restart.
  • Alternative: If the issue persists, try joining the domain using the raw IP address of the Domain Controller temporarily to confirm if the block is strictly DNS-based or a deeper Active Directory replication issue.