ERROR: Unable to join server in existing server group.

Add server failed - Add of server XYZ to server group failed.

In event logs we could see 'access is denied' exception while running the command : 'Add-DSCertificateToDSStore'
 

• We need to have Configuration replication and cluster join service to be added to local admin group on both the Storefront server (Joiner and the server that we are trying to join).
• In case we are not able to add these services to local admin group we can check the Log On As account for these services (Or any other services you see the same issue while adding).
• Both these services run as Network service. Hence we can add network service into local admin group on Storefront servers.
• Try again and the affected server should get joined successfully to the server group.
• If you get the propagation error this time just try again and it should work.
• Once the server gets added, advise customer to take a snapshot of both the server.

Problem Cause

Permissions issue