Access Denied when trying to run DCpromo

[Guest]

Help here please:

I'm still having a problem promoting a DC using DCpromo
I'm having this error Failed to modify the properties of
the machine account "access denied" I tried almost
everything.

->http://support.microsoft.com/?kbid=232070 and
->http://support.microsoft.com/?kbid=250874
-> Double check my Enable this computer to be trusted for
delegations, user rights permissions. It is all applied in
my DCs, create another account just do test but no luck!
-> Rename the prospect DC to a new name, rejoin to domain,
create a new account with admin rights etc and run DCpromo
same problem!
-> Triple check all my policies, DNS, netdiag, dcdiag,
gpresult...

Can anybody assist if there is any other workaround?
It is almsot two weeks now fixing this problem and i have
been to all the newsgroups that I know but no luck!

I even asked our Enterprise Admins to try to promote a DC
in my child domains and it worked for his account using
the EA. He told me that there is somthing wrong with my
polciy in the child domain.. But my Domain admins account
has no policy attached except the Domain Policy.
I dont want to call him whenever I need to promote a DC in
my child Domains.. Where the HELL is the problem
I'm becoming helpless!
_________________

 

[Aimme Lirette MSFT]

Based on the help file you need to be a domain admin for the root domain, or
enterprize admin:

a.. To perform this procedure, you must be a member of the Domain Admins
group (in the parent domain) or the Enterprise Admins group in Active
Directory, or you must have been delegated the appropriate authority. As a
security best practice, consider using Run as to perform this procedure.

I believe this is because you need to be able to make changes at the site
the domain controller is going to be moved too. You could check the
permissions on that, and make sure your account has permissions there and
see if that works.

Thank you,
Aimme Lirette