DC Error "Failed Machine Test"

[Joe]

Ok, so I am preping an AD migration from Server00 to
Server03. Ran the adprep on my 00 DC and got it all
ready. Now I wanted to make sure everything is ok with
the machine so I ran DCDiag on it, remotely from another
Server (NOT A DC), the only test it failed is the
MachineAccount test, however it isnt 'trusted for
delegation'.

Does this mean my DC is jacked up or the setting is
simply not checked?

Joe

 

[Richard McCall [MSFT]]

In Active Directory Users and Computers, Right Click on the DC and select
properties. In the dialog that comes up check Trusted for Delegation. This
should be enabled on all DCs by default. This can be changed if you try to
join a machine to the domain with the same name as the DC and it can hijack
the machine account. You''l know more when you try and dcpromo another dc
into the domain.