DCPROMO Active Directory Install fails - configuring a server as an additional domain controller for the domain

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Russell White (rwhite04_at_maine.rr.com)
Date: 02/01/05 

Date: Tue, 1 Feb 2005 12:36:46 -0500

Greetings.

I am trying to add a windows server 2003 domain controller as an 'additional
domain controller for the domain...'. The existing domain is hosted on
SBS2000. I have already successfully run adprep - domainprep and adprep -
forest prep on the existing sbs2000 server but when I try run DCPromo on the
windows server 2003 pc that i want to replicate AD to it goes through all
the steps and then fails with the error: "the operation failed because:
The Activie Directory Installation Wizard was unable to convert the computer
account (XYZ)$ to a domaiin controller account. "Access is Denied".

I found some MS articles on the case instructing you to make sure that you
have delegated the account that is logged onto the 2nd DC machine doing the
promo the right to "enable computer and user accounts to be trusted for
delegation". I have not rebooted the production server yet (after making
the change in AD). But on both machines I am logged on as THE system
administrator (administrator) so think I would have the rights to do this.
Would you agree?

my dcpromo log reads:

02/01 11:25:22 [INFO] Error - The Active Directory Installation Wizard was
unable to convert the computer account SBSTEMP$ to a domain controller
account. (5)
02/01 11:25:26 [INFO] NtdsInstall for cascodev.com returned 5
02/01 11:25:26 [INFO] DsRolepInstallDs returned 5
02/01 11:25:26 [ERROR] Failed to install to Directory Service (5)
02/01 11:25:35 [INFO] Starting service NETLOGON

02/01 11:25:35 [INFO] Configuring service NETLOGON to 2 returned 0
02/01 11:25:35 [INFO] The attempted domain controller operation has
completed

02/01 11:25:35 [INFO] DsRolepSetOperationDone returned 0

Any thoughts ?

TIA

~Russ

Relevant Pages

  • Re: More than one Administrator Account and Reinstalling OS on a D
    ... Some one has created a regular user account and may added that one to ... There is only one built-in administrator peer domain. ... FSMO roles are actually supposed to be transferred automatically during ... When you remove an existing Domain Controller within Active Directory, ...
    (microsoft.public.win2000.active_directory)
  • Re: More than one Administrator Account and Reinstalling OS on a DC
    ... First to deal with the administrator question, ... administrator account (the one that you can't remove from the administrators ... When you remove an existing Domain Controller within Active Directory, ... Controller you trying to demote is a holder of any of there's. ...
    (microsoft.public.win2000.active_directory)
  • Re: Blank Forest Functional Level - Unable to fix
    ... to a domain controller. ... promote the new server with Windows Server 2003x64 R2 to a domain controller ... The domain functional level was Windows Server 2003. ... Server 2003 however the forest functional level is blank. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Blank Forest Functional Level - Unable to fix
    ... to a domain controller. ... promote the new server with Windows Server 2003x64 R2 to a domain controller ... The domain functional level was Windows Server 2003. ... Server 2003 however the forest functional level is blank. ...
    (microsoft.public.windows.server.active_directory)
  • DCPROMO Active Directory Install fails - configuring a server as an additional domain controller for
    ... I am trying to add a windows server 2003 domain controller as an 'additional ... account $ to a domaiin controller account. ... administrator so think I would have the rights to do this. ...
    (microsoft.public.windows.server.general)