Adding authenticating Win2K server

[Craig]

I have an old NT4.0 PDC that was upgraded to W2K w/AD
before I started my current job. We have a new server to
replace it, virgin build, and when I run DCPROMO to add
the new server as an authenticating server I get the
following error:

"The operations failed because: Failed to modify the
necessary properties for the machine account NEWSERVER$.

"Access is denied"

Type in the username and password of an account with
sufficient privileges to create an additional domain
controller for this domain.

I'm logged in as the domain administrator...

What am I missing, or is it the upgrade from NT4.0 that is
holding me back?

Thanks in advance..

Craig

 

[Matjaz Ladava [MVP]]

See http://support.microsoft.com/?kbid=250874 and
http://support.microsoft.com/?kbid=308311 for solution

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

 

[David Brandt [MSFT]]

Usually it would be the Delegation right not having Administrators listed
but take a look at the following to see if it doesn't get you going;
250874 "Access Denied" Error Message During Active Directory Promotion of
http://support.microsoft.com/?id=250874

232070 "Access Denied" During Domain Controller Promotion
http://support.microsoft.com/?id=232070

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Guest]

Got past the first hurdle, stuck on another access error.

I followed all the instructions in the articles posted in
the original replies and did get past the error of
modifying the computer account.

Now I am still getting an access denied error, but no
indication in any log or event viewer as to where the
denial is occuring.

I have checked all the permissions on all the files and
directories listed in the KB articles but still get
an 'access denied' error running DCPROMO.

Are there any other resources I can use to determine where
the denial is being generated?

Thanks in advance,

Craig

 

[IBTerry [MSFT]]

Check the DCPROMO log files located in the WINNT\DEBUG folder. The main
reason for access denied that I can think of is that the administrator is
not trusted for delegation.
Not sure if this is the article you mentioned.
250874 "Access Denied" Error Message During Active Directory Promotion of
http://support.microsoft.com/?id=250874

IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.