Cannot add a DC, Access Denied

[Oren Justin]

I'm still trying to fix this problem when I run DCpromo in
my DC. I have this message

Failed to modify the properties of the computer account
mydc$ "Access denied."

I have a child domain model. Do I need an enterprise admin
rights to add DC if I want to add a DC in my child domain?

I have done almost all like the following but no luck!!!

-> I tried the following workarounds but no lucks after
performing these KBID from MS
http://support.microsoft.com/?kbid=232070 and
http://support.microsoft.com/?kbid=250874
-> Rename the prospect DC to a new name, rejoin to domain,
create a new account with admin rights etc and run DCpromo
same problem!
-> I tried to build a new server put it in a different DS
site which has two DCs that are working with all know
patches from MS same problem.
->I created a new account admin account and grant a user
rights "Enable this account to be trusted for delegation"
same.
-> I ensure that all my GPOs are replicating, our local
dns is fine but no luck still
- I run DCdiag run all those test, check health of my AD,
DNS, FSMO holders no luck

NOW where is the solution?

Please assist..
Running out of patience it has been two weeks
now!!!!!!!!!!!!!!!!!!!

 

[Cary Shultz [A.D. MVP]]

Oren,

I think that a simple search would have brought you your answer. This has
been asked several times in the recent past. You could also have searched
the MSKB for this as using this error will bring you several hits!

Pleas do not misunderstand me. I am not picking on you. I always ass/u/me
that everyone who uses the newsgroups would be familiar also with the
Microsoft Knowledge Base ( MSKB ). Not always the case.

If you go to http://support.microsoft.com you will be brought to a page with
several links ( the link to the newsgroups is also on this page! Well, not
T H E link, but a link! ). Click on the KB link, select Microsoft 2000 as
the product and enter the first part of your error message "failed to
modify" as the search parameter and select 'exact phrase as shown' - or
whatever it is exactly - and you will be presented with a few articles. One
of which is:

http://support.microsoft.com/default.aspx?scid=kb;en-us;250874&Product=win2000

I think that this is your answer.

You could also have gone to http://www.google.com and entered your entire
error message and have been given many links.

Again, I am not picking on you. I am providing this information so that you
can search on your own and not necessarily be dependent upon someone else in
all situations. You are, of course, always welcome to post. When I started
out I just went through the questions and then looked at the answers. There
is a ton of information in here!

HTH,

Cary