Re: DCPROMO Active Directory Install fails - configuring a server as an additional domain controller for the domain

From: Jeff Middleton [SBS-MVP] (jeff_at_cfisolutions.com)
Date: 02/02/05 

Date: Tue, 1 Feb 2005 21:49:57 -0600

You are on the right track.

I can't really say if you are moving toward a problem, but in general you
are on the right course.

"Russell White" <rwhite04@maine.rr.com> wrote in message
news:uT4GaSICFHA.936@TK2MSFTNGP12.phx.gbl...
> Greetings.
>
> I am trying to add a windows server 2003 domain controller as an
'additional
> domain controller for the domain...'. The existing domain is hosted on
> SBS2000. I have already successfully run adprep - domainprep and adprep -
> forest prep on the existing sbs2000 server but when I try run DCPromo on
the
> windows server 2003 pc that i want to replicate AD to it goes through all
> the steps and then fails with the error: "the operation failed because:
> The Activie Directory Installation Wizard was unable to convert the
computer
> account (XYZ)$ to a domaiin controller account. "Access is Denied".
>
> I found some MS articles on the case instructing you to make sure that you
> have delegated the account that is logged onto the 2nd DC machine doing
the
> promo the right to "enable computer and user accounts to be trusted for
> delegation". I have not rebooted the production server yet (after making
> the change in AD). But on both machines I am logged on as THE system
> administrator (administrator) so think I would have the rights to do this.
> Would you agree?
>
> my dcpromo log reads:
>
> 02/01 11:25:22 [INFO] Error - The Active Directory Installation Wizard was
> unable to convert the computer account SBSTEMP$ to a domain controller
> account. (5)
> 02/01 11:25:26 [INFO] NtdsInstall for cascodev.com returned 5
> 02/01 11:25:26 [INFO] DsRolepInstallDs returned 5
> 02/01 11:25:26 [ERROR] Failed to install to Directory Service (5)
> 02/01 11:25:35 [INFO] Starting service NETLOGON
>
> 02/01 11:25:35 [INFO] Configuring service NETLOGON to 2 returned 0
> 02/01 11:25:35 [INFO] The attempted domain controller operation has
> completed
>
> 02/01 11:25:35 [INFO] DsRolepSetOperationDone returned 0
>
> Any thoughts ?
>
> TIA
>
> ~Russ
>
>

Relevant Pages

  • Re: More than one Administrator Account and Reinstalling OS on a D
    ... Some one has created a regular user account and may added that one to ... There is only one built-in administrator peer domain. ... FSMO roles are actually supposed to be transferred automatically during ... When you remove an existing Domain Controller within Active Directory, ...
    (microsoft.public.win2000.active_directory)
  • Re: More than one Administrator Account and Reinstalling OS on a DC
    ... First to deal with the administrator question, ... administrator account (the one that you can't remove from the administrators ... When you remove an existing Domain Controller within Active Directory, ... Controller you trying to demote is a holder of any of there's. ...
    (microsoft.public.win2000.active_directory)
  • Re: SP1 setup fails. Access is denied
    ... I am using the "administrator" account. ... >> Select 'OK' to undo the changes that have been made. ... >> Windows Server 2003 has been partially updated and may not work ...
    (microsoft.public.windows.server.setup)
  • General Questions
    ... What is the major drawback of using the Member Of tab in a user’s account ... How can an administrator control what access users have to particular ... In what waydoes Microsoft attempt to ensure that a Windows Server ... Briefly explain the function of the default security template. ...
    (microsoft.public.dotnet.framework.windowsforms)
  • Re: SBS 2003 Admin Password Reset
    ... And IIRC, unlike normal Windows Server 2003, SBS 2003 usually syncs the ... How To Reset the Directory Services Restore Mode Administrator Account ... domain admin password. ...
    (microsoft.public.windows.server.sbs)