Re: Backup AD
From: Jim Behning (jimbehningmvp_at_atl.mindspring.com)
Date: 05/07/04
- Next message: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]: "<< TechNet Webcast: Small Business Server 2003: A Technical Overview - May 14th >>"
- Previous message: Jim Behning: "Re: smtp queue length??"
- In reply to: Jose: "Re: Backup AD"
- Next in thread: Jose: "Re: Backup AD"
- Reply: Jose: "Re: Backup AD"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 07 May 2004 03:40:23 GMT
net time //sbsservernam /set /yes
servers do not do a lot of things well unless the time is the same.
Make sure time zones are the same.
Note from Jeff Middleton regarding some AD tasks.
The operation failed because: The Active Directory Installation Wizard
was unable to convert the computer account [SERVERNAME]$ to a domain
controller account. "Access is denied."
http://support.microsoft.com/?kbid=250874 and
http://support.microsoft.com/?kbid=232070
for explanation and solution.
To resolve this problem, use an account in the Administrators group,
or add the appropriate account to the Administrators group. To grant
this right to another user or group, set the delegation privilege on
the Group Policy object:
1) In the Active Directory Users and Computers snap-in, edit the
Default Domain Controllers Policy on the Domain Controllers
Organizational Unit.
2) Double-click Computer Configuration, click Windows Settings,
click Security Settings, click Local Policies, and then click User
Rights Assignment.
3) Under Enable Computer and User Accounts to be trusted for
Delegation, add the appropriate account or group.
4) Apply the policy using one of the following methods:
5) At a command prompt, type secedit /refreshpolicy
machine_policy /enforce.
6) In the Sites and Services snap-in (Dssite.msc), use the
Replicate Now feature to force replication from the domain controller
on which the policy was changed to the other domain controllers in the
domain.
Above info shared by Jeff M regarding another issue related to your
task.
"Jose" <ineedtoknow@knowledge.com> wrote:
>I tried to do it with 2 Windows 2003 server and it did
>not work.
>After I entered all the logon info, and it started to
>replicate, it gave me a message that I do not have enough
>permission to update the servername$ to Domain Controller.
>I entered the Administrator logon information, who is
>also the Enterprise admin.
>The same message appeared when I tried in the other
>server.
>
>
>
>>-----Original Message-----
>>Indeed, you can have additional domaincontrollers in a
>SBS environment.
>>
>>--
>>Regards,
>>
>>Marina
>>Microsoft SBS-MVP
>>
>>"Jose" <ineedtoknow@knowledge.com> schreef in bericht
>>news:961101c43382$3ce4f720$a301280a@phx.gbl...
>>> So is no problem a member server in a SBS 2003 Domain
>to
>>> do set up the role of Domain Controller.
>>> And then I will have the backup for AD.
>>>
>>>
>>> >-----Original Message-----
>>> >Have you made one of those memberservers
>>> domaincontrollers? Have a look in
>>> >Servermanagement. There are helpfiles that explain
>>> exactly what you will
>>> >have to do.
>>> >
>>> >--
>>> >Regards,
>>> >
>>> >Marina
>>> >Microsoft SBS-MVP
>>> >
>>> >"Jose" <ineedtoknow@knowledge.com> schreef in bericht
>>> >news:782401c4310a$1da89d00$a301280a@phx.gbl...
>>> >> I have a SBS Premium 2003, in the Domain I have a
>cou
>>> ple
>>> >> other member servers Windows 2003. How can I set
>one
>>> of
>>> >> these as the backup AD server in case SBS goes
>down?
>>> >> Thanks
>>> >
>>> >
>>> >.
>>> >
>>
>>
>>.
>>
Jim B. SBS MVP
remove the mvp to send email
- Next message: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]: "<< TechNet Webcast: Small Business Server 2003: A Technical Overview - May 14th >>"
- Previous message: Jim Behning: "Re: smtp queue length??"
- In reply to: Jose: "Re: Backup AD"
- Next in thread: Jose: "Re: Backup AD"
- Reply: Jose: "Re: Backup AD"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
