dcpromo

[C Hall]

Greetings!

Can anyone point me to a document describing the process of what happens
when you promote (dcpromo) a member server to a domain controller? I had run
into a problem while promoting an additional dc in an existing
domain--access denied. The problem turned out to be that I had to add
administrator to the "Enable users and computers to be trusted for
delegation" in the existing domain controller policy.

Thanks,
Chris

 

[Herb Martin]

Greetings!

Can anyone point me to a document describing the process of what happens
when you promote (dcpromo) a member server to a domain controller?

I am sure some can (or that you can find such by Googling
the Microsoft site), but wouldn't you prefer just to understand the
important changes?

I had run
into a problem while promoting an additional dc in an existing
domain--access denied. The problem turned out to be that I had to add
administrator to the "Enable users and computers to be trusted for
delegation" in the existing domain controller policy.

That's odd -- most people don't have to "add" this. For
most people it is already set correctly. (E.g., I have
run DCPromo hundreds of time and never needed to do
that. Thousands if you count the people that I have helped
directly.)

Were you possibly logging onto the DC-to-be with a local
account or with a non-Domain account?

When you do a DCPromo into an existing domain the Active
Directory database is copied from an existing DC and the
services needed for AD are enabled on that server (e.g.,
NetLogon, FRS for Sysvol, LDAP, etc....)