Re: Cannot add a DC, Access Denied

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 04/08/04


Date: Thu, 8 Apr 2004 04:03:28 -0400

Oren,

I think that a simple search would have brought you your answer. This has
been asked several times in the recent past. You could also have searched
the MSKB for this as using this error will bring you several hits!

Pleas do not misunderstand me. I am not picking on you. I always ass/u/me
that everyone who uses the newsgroups would be familiar also with the
Microsoft Knowledge Base ( MSKB ). Not always the case.

If you go to http://support.microsoft.com you will be brought to a page with
several links ( the link to the newsgroups is also on this page! Well, not
T H E link, but a link! ). Click on the KB link, select Microsoft 2000 as
the product and enter the first part of your error message "failed to
modify" as the search parameter and select 'exact phrase as shown' - or
whatever it is exactly - and you will be presented with a few articles. One
of which is:

http://support.microsoft.com/default.aspx?scid=kb;en-us;250874&Product=win2000

I think that this is your answer.

You could also have gone to http://www.google.com and entered your entire
error message and have been given many links.

Again, I am not picking on you. I am providing this information so that you
can search on your own and not necessarily be dependent upon someone else in
all situations. You are, of course, always welcome to post. When I started
out I just went through the questions and then looked at the answers. There
is a ton of information in here!

HTH,

Cary

"Oren Justin" <anonymous@discussions.microsoft.com> wrote in message
news:1a11f01c41d36$cc962d10$a101280a@phx.gbl...
> I'm still trying to fix this problem when I run DCpromo in
> my DC. I have this message
>
> Failed to modify the properties of the computer account
> mydc$ "Access denied."
>
> I have a child domain model. Do I need an enterprise admin
> rights to add DC if I want to add a DC in my child domain?
>
> I have done almost all like the following but no luck!!!
>
> -> I tried the following workarounds but no lucks after
> performing these KBID from MS
> http://support.microsoft.com/?kbid=232070 and
> http://support.microsoft.com/?kbid=250874
> -> Rename the prospect DC to a new name, rejoin to domain,
> create a new account with admin rights etc and run DCpromo
> same problem!
> -> I tried to build a new server put it in a different DS
> site which has two DCs that are working with all know
> patches from MS same problem.
> ->I created a new account admin account and grant a user
> rights "Enable this account to be trusted for delegation"
> same.
> -> I ensure that all my GPOs are replicating, our local
> dns is fine but no luck still
> - I run DCdiag run all those test, check health of my AD,
> DNS, FSMO holders no luck
>
> NOW where is the solution?
>
> Please assist..
> Running out of patience it has been two weeks
> now!!!!!!!!!!!!!!!!!!!
>
>
>
>



Relevant Pages

  • Re: Multiple DNS Servers
    ... > regarding our DNS servers. ... > listed below the error message that is continually written ... The local computer may not have the ... You can't just unplug them like you can in NT4. ...
    (microsoft.public.win2000.dns)
  • Adding second domain controller
    ... miserable time trying promote a server to a second domain ... Knowledge Base articles 237675 (Setting Up DNS for Active ... Controller in a Domain Tree). ... the existing domain I get an error message stating "The ...
    (microsoft.public.win2000.active_directory)
  • Adding second domain controller to existing domain
    ... miserable time trying promote a server to a second domain ... Knowledge Base articles 237675 (Setting Up DNS for Active ... Controller in a Domain Tree). ... the existing domain I get an error message stating "The ...
    (microsoft.public.win2000.dns)
  • Adding second domain controller to existing domain
    ... miserable time trying promote a server to a second domain ... Knowledge Base articles 237675 (Setting Up DNS for Active ... Controller in a Domain Tree). ... the existing domain I get an error message stating "The ...
    (microsoft.public.win2000.networking)
  • Re: cannot join WinXP to Windows 2000 domain
    ... Below is the error message when attempting to join domain. ... I'm not sure how to get all the DNS ... The following domain controllers were identified by the query: ... Host records that map the name of the domain controller to its IP ...
    (microsoft.public.win2000.active_directory)

Loading