Unable to promote a DC "access denied"

[nwtest]

I'm trying to promote a DC on my remote site.
I have the site created with the correspondign subnet
etc.I have also my local zone copy of DNS. No blocking on
the port etc.
THe problem is :
When I tried to run DCPromo I got this error
"The operation failed because: Failed to modify the
necessary properties for the machine account MyrDC-DC20$
"Access is denied. ".
I'm using an account with Administrator rights to run the
DCPROMO.

Any body can help me? The only changed I did is I rename
the built in Account Administrator to somnthing else for
security reason and nothing else.

when I promote a member server does it need to login firt
to my main DC which is the PDC emulator? Because I found
the this machine is authenticating to diffirent DC. If it
make snese how can I force this machine to authenticate to
my main DC so that I can do the promotion


Thanks

 

[Rich]

Do you have the Server already in the domain as a member
server? If so try removing it from the domain then
promoting it to a DC.

You should be using the Domain's Admin account and not the
local account so you shouldn't have problem with a renamed
admin account.

Hope this help.

Rich

 

[Cary Shultz [A.D. MVP]]

This problem is most probably caused by the DC not being trusted for
delegation. It can also happen if the account that you are using does not
have the 'Delegation Privilege'. I think that Rich was referring to that.

Take a look at the following MSKB Links:

http://support.microsoft.com/?id=232070
http://support.microsoft.com/?id=250874

I believe that 250874 is what you will need.

HTH,

Cary

 

[Corné Bogaarts]

Does your account have local administrator rights only for the
server, or are you using a Domain administrator account?

You should use the latter.

I'm trying to promote a DC on my remote site.
I have the site created with the correspondign subnet
etc.I have also my local zone copy of DNS. No blocking on
the port etc.
THe problem is :
When I tried to run DCPromo I got this error
"The operation failed because: Failed to modify the
necessary properties for the machine account MyrDC-DC20$
"Access is denied. ".
I'm using an account with Administrator rights to run the
DCPROMO.

Any body can help me? The only changed I did is I rename
the built in Account Administrator to somnthing else for
security reason and nothing else.

when I promote a member server does it need to login firt
to my main DC which is the PDC emulator? Because I found
the this machine is authenticating to diffirent DC. If it
make snese how can I force this machine to authenticate to
my main DC so that I can do the promotion


Thanks

--- --- --- --- --- --- ---
Most answers can be found in the Schedule+ FAQ: http://www.xs4all.nl/~bogaarts/schdmenu.htm.
Please reply to the newsgroup. For reasons of Spam, I won't be including my E-mail address anymore.

 

[Guest]

I'm indeed using a domain administrator Account. For a
test I remove it to a domain and put it in workgroup but
same.

Any other idea!

-----Original Message-----
Does your account have local administrator rights only for the
server, or are you using a Domain administrator account?

You should use the latter.




--- --- --- --- --- --- ---
Most answers can be found in the Schedule+ FAQ: http://www.xs4all.nl/~bogaarts/schdmenu.htm.
Please reply to the newsgroup. For reasons of Spam, I

won't be including my E-mail address anymore.

 

[Guest]

I remove it to a domain and put it in workgroup and run
DCRPomo but same.

I need to fix this issue.
Any other idea!