Error while dcpromo an additional domain controller in Win2k Serve

G

Guest

I do receive this error when try to dcpromo an additional domain controller
in Win2k Server - the DC in running on Win2k Server and additional need to be
dcpromo also is Win2k Server

The error I do encounter is :

The operation failed because: The Directory Service failed to create the
server object for CN=NTDS
Settings,CN=MAVCAP-STG1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mavcap,DC=com
on server mavcap-dc.mavcap.com. Please ensure the network credentials
provided have sufficient access to add a replica. "Access is denied. "

- I have try to use the enterprise admin / administartor accounts also failed.

Please help me on this issue

-muthu-
 
H

Harj

Hi,

Well for starters, make sure this machine is pointed to a DC already in
the network for primary DNS.

I have seen this where it is not the credentials that are being denied
but the domain name.
The screen where you have type the user name, password, and USER DOMAIN
of the user account you want to use for this operation is where the
problem might be.
I have found that when DCPROMO asks for the userid, password, and
domain it can be fussy.
When you DCPROMO the credentials box automatically shows domain.local
Change the domain to the netbios domain name instead of the FQDN.

Good luck
Power Your Active Directory Investment
www.specopssoft.com
 
H

Harj

Hi,

Well there are two suggestions above and no one has come back stating
that one or both did not resolve the issue.
Are you experiencing the same issue as the original post?
If so please explain the issue you are having in a bit more detail and
we all could bang heads to get it resolved.

Harj Singh
Power Your Active Directory Investment
www.specopssoft.com
 
G

Guest

Actually the scenario goes like this the system administrator promoted a new
domain controller and installed a lot of applications(Don't know why he
installed an application on the AD). He suddenly realized that he needs a
back domain controller so he asked me to create an additional domain
controller. During the promotion of additional domain controller I got the
same issue posted by Mu@2. My first work around is in DNS so I checked but I
found it pretty good. The next step I did is to check the entry on directory
so I use NTDSUTIL so far there was no other entry on directory. I also
updated the Windows 2000 server to make sure that it will work well before I
make an additional domain controller. Hope you could help me on this.
 
H

Harj

Hi,

Ok we have the the additional server pointed to your only domain
controller for primary DNS and we run DCpromo and generate the same
error, Please ensure the network credentials provided have sufficient
access to add a replica. "Access is denied. "?
Are you trying to join a W2K machine to a W2K3 domain functional level
and/or the forest functional level?
Have you looked at the DCpromo.log to see if that gives you anymore
info.

To determine the current functional level:
1. Open Active Directory Users and Computers on a Windows Server 2003
domain controller.
2. Right-click the domain in the left-hand pane and press Properties.
3. The Domain function level and Forest functional level appear on the
General tab.


Good luck

Harj Singh
Power Your Active Directory Investment
www.specopssoft.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

dcpromo 2nd domain controller 3
URGENT: Error while running DCpromo 1
Slow Logons and Can't open files 0
Active Directory Replication Problem... 0
remove sub-domain on root domain 2
2k server to 2k3 AD upgrade 0
FSMO issues 4
Unable to local DC ......... URGENT 1

Top