Unable to DCpromo for add in additinal domain control

[PC Ooi]

I have a problem to dcpromo for additional domain control,
the system prompt my administrator account is sufficient
privileges to create additional domain control.

I was check the NTFS folder permission for c:\NTDS
is OK

Anyone can help, where is permission i need to set?

Error msg
The operation failed because: Failed to modify the
necessary properties for the machine account EAMSVR01$
"Access is denied. "

 

[Shawn Rabourn \(MS\)]

Try adding Authenticated Users and Enterprise Domain controllers to the
"Access this computer from the network" user right on the Default Domain
Controllers Policy on the existing DC.

Use "secedit /refreshpolicy machine_policy /enforce" to push that policy
down.

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.