Re: acceess denied in dcpromo wizard

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Did you by any chance pre-created that computer account before joining the
server to the domain?

These are the default UserAccountControl values for the certain objects:
Typical user : 0x200 (512)
Domain controller : 0x82000 (532480)
Workstation/server: 0x1000 (4096)

If you want to restore the default DC value You can use either LDP or
ADSIEDIT.MSC

When using adsiedit:
* Connect to the domain NC
* Navigate to the Domain Controllers OU
* Right click on the properties of the DC for which you want to change the
UserAccountControl value.
* Goto the UserAccountControl attribute
* You should see some value: <something>
* Change that value to: 532480

After this is you go to LDP to the same location you see:
userAccountControl: 0x82000 = ( UF_SERVER_TRUST_ACCOUNT |
UF_TRUSTED_FOR_DELEGATION )

what is the value for "userAccountControl" in your case?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"bob via WinServerKB.com" <u21771@uwe> wrote in message
news:62174e0cf30b6@xxxxxx
hi to all.
i have an error in prossecc of creating a secound DC in my company .
when i run the DC promo wizard i get this error message : what is
soloution ?

<<The operation failed because: The Active Directory Installation Wizard
was
unable to convert the computer
account COMPUTER_NAME$ to a domain controller account. "Access is
denied.">>

when the wizard asked me to input the USERNAME and PASSWORD , i have
entered
the ADMINISTRATOR of the fierst dc .

thanx for your time ..

--
Message posted via http://www.winserverkb.com


.

Relevant Pages

  • Re: Problem running a script
    ... ' UserAccountControl .vbs ... ' Here is where we set the value to enable the account ... ' The heart of this script - Enable users ... how do I determine which part of domain policy is stopping this from running so that I can disable it. ...
    (microsoft.public.windows.server.active_directory)
  • Re: export and import with csvde or ldifde
    ... Q305144 Values for userAccountControl ... here I'm channging the Account Options on a user account. ... description: Students FifthAvenue 2004 MM2A ... displayName: Stephen Simpson ...
    (microsoft.public.win2000.active_directory)
  • Re: userAccountControl
    ... I would expect the value of userAccountControl to be 514 for a disabled ... account to Never Expire and the value changes to 66050. ... Dim strDNSDomain, strFilter, strQuery, objRecordSet, strDN ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.scripting.vbscript)
  • Re: Determine disabled status
    ... James wrote: ... how do i use the above to determine whether my account is disabled? ... If (userAccountControl And ADS_UF_ACCOUNTDISABLE) = ... userAccountControl that have this flag set, ...
    (microsoft.public.dotnet.languages.vb)
  • userAccountControl
    ... userAccountControl property but continue to receive conditions in my results ... I need to know when the ACCOUNTDISABLE flag is not set or the account is not ... Dim ADOconnection, ADOcommand, ctrUsers, strName, userAccountControl, ... Const ACCOUNTDISABLE = &h0002 ...
    (microsoft.public.scripting.vbscript)