Unable to promote member server to DC

[Arvind Shukla]

I have installed Windows 2000 server with Service pack
4.I want to promote it to Domain controller of existing
domain. When I run DCPROMO it fails:
"Failed to modify properties for MachineName$:Acces
denied"

Administrator password is correct ,which is used to log
on to Domain Controller & same is used for Active
Directory restoration also. Administrator is member of
Schema Admin,Enterprise Admin,Domain Admin etc.

Any help for this problem.

Thanks

 

[John]

Most of the time promotion problems are DNS related.
If it were me I would NOT have the admin in the schema admin group!! Very
bad practice. I would create a user just for this purpose and keep it
disabled when not in use. Schema modifications are seldom and this makes the
modification a deliberate act. Just think of what will happen when someone
writes a virus for users who do this because it's easier. Ultimately you
shouldn't even be a Admin or domain admin and use the secondary logon
service. Keeps things protected and EVERYTHING you do is deliberate rather
than accidental.

 

[Arvind Shukla]

Problem is solved.
Link to Domain Controller policy was found missing from
Domain Controller's OU.