PLEASE HELP ME, THIS IS 3RD POST ALREADY

  • Thread starter Thread starter FARAKH
  • Start date Start date
F

FARAKH

-----Original Message-----
I have read both of the below articles. I have tried, but
I dont have a domain controller policy on my network.
Should I have one? I dont know what to do. Can someone
please instruct me on how to fix this problem.
.
Click to expand...
 
From reading the information below here are a few things that you should
check:

1. Make sure that this server is pointing to the existing domain controller
for Primary DNS (at least until after the promotion.

2. Below you said that your account is a domain admin- but is it an
Enterprise admin? When running DCPROMO changes are made to the computer
account and to site information- which only Enterprise admins, or the
administrator of the first domain in the forest have permissions to.

3. Check the default domain controller policy and make sure Administrators
have the right to Enable computer and user accounts to be trusted for
delegation. -- below I see that you don't have a "default domain controller
policy". by default there should be one in the domain. If you open active
directory users and computers then right click on the Domain Controllers OU
and choose the policies tab- you should have a "default domain controllers
policy" listed. If you don't that could be a problem.

If the group policy object is missing you may need to restore it from a
backup.
[/QUOTE]
 
Ok, do you have a default domain controller policy?
And what account are you using? Is it an enterprise admin?
 
I have a default domain controller policy. I am logging
in as administrator, and administrator is a member of
enterprise admins.
 
It seems that a lot of people are having this problem. I
am so frustrated with this. I too have followed all the
articles. I'm an enterprise admin, have the delegation
privilege, the server that I'm trying to promote show the
delegation priviledge as the effective setting in the
local security policy for the domain.

There must be something else going on. Please help
 
I've finally gotten this to work. Whoever is having this
problem, it may be that they are missing the files for
the default domain policy and/or the default domain
controller policy.

Feel free to email me at (e-mail address removed) if you are still
having problems.
-----Original Message-----
It seems that a lot of people are having this problem. I
am so frustrated with this. I too have followed all the
articles. I'm an enterprise admin, have the delegation
privilege, the server that I'm trying to promote show the
delegation priviledge as the effective setting in the
local security policy for the domain.

There must be something else going on. Please help
-----Original Message-----
I have a default domain controller policy. I am logging
in as administrator, and administrator is a member of
enterprise admins.
-----Original Message-----
Ok, do you have a default domain controller policy?
And what account are you using? Is it an enterprise admin?
Click to expand...
and
confers no rights.
I have done all of the below and it is still giving
Click to expand...
me
the
same error.
-----Original Message-----
From reading the information below here are a few things
that you should
check:

1. Make sure that this server is pointing to the
existing domain controller
for Primary DNS (at least until after the promotion.

2. Below you said that your account is a domain admin-
but is it an
Enterprise admin? When running DCPROMO changes are made
to the computer
account and to site information- which only Enterprise
admins, or the
administrator of the first domain in the forest have
permissions to.

3. Check the default domain controller policy and make
sure Administrators
have the right to Enable computer and user accounts
Click to expand...
to
be
trusted for
delegation. -- below I see that you don't have a "default
domain controller
policy". by default there should be one in the domain.
If you open active
directory users and computers then right click on the
Domain Controllers OU
and choose the policies tab- you should have a "default
domain controllers
policy" listed. If you don't that could be a problem.

If the group policy object is missing you may need to
restore it from a
backup.
Click to expand...
warranties,
and
Click to expand...
Click to expand...
 
Farkar,

Let's start from the beginning.

Do you have an existing Domain Controller? I believe that you have two
already IIRC, correct?

Does this existing Domain Controller have any issues? You can install the
Support Tools and run dcdiag /c /v and netdiag /v to check this out. I
believe that you have already done this on both, correct?

Do the existing Domain Controllers have a WINNT\inf folder? and is that
folder populated with a bunch of .inf files?

I am not sure what you mean when you say that you have no default domain
controllers policy....

If you have run dcdiag and netdiag and all was okay then I guess that we can
suppose that all is fine and dandy with DNS. What happens if you use
nslookup?

Cary



 
Back
Top