Windows Forum

Ask something
Discussion Locked

Problem adding additional DC

0 helpful
8 replies

by adel_ibrahim

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to add another DC onto our network. (The server has existed within the domain as a regular server). Currently running win2000 sp4 running iis (intranet site) and RAS. If I try to intall AD I get the following error "The operation failed because: Failed to modify the
necessary properties for the machine account servername$. Access is denied." message lower down on the window states: "Type the user name and password of an account with sufficient privileges to create an additional domain
controller for the mydomain.com domain" I have used the administrator account and my own, and still get the same error. HELP PLEASE

8 replies

by adel_ibrahim

yes but i am not sure ..it is a win2000 server normal with active directory and it's the only server in my domain

by seanl

I had the exact problem last week. It is fairly simple to fix. I had to ensure that the "Enable computer and users accounts to be trusted for delegation" user right was granted to the Administrators Group in the domain controllers policy. Open the Domain Controller policy - go to "Computer configuration" - "Windows Settings" - "Security Settings" - "Local Policies" - "User Rights Assignments". Scroll to "Enable computer and users accounts to be trusted for delegation" and add your Domain admins group.

Hope all goes well

by adel_ibrahim

i try this but it not help......but i have in the avtive directory "default domain policy" and "default domain controllers policy" and i did this with the "default domain controllers policy " but nothing change .....

by adel_ibrahim

i try this but it not help......but i have in the avtive directory "default domain policy" and "default domain controllers policy" and i did this with the "default domain controllers policy " but nothing change .....

by santrond

I also ran into this error sometime ago while adding a secondary DC. In my case, the server I was upgrading to a DC, did not have the DNS Suffix of the Domain I was trying to join it to. This could be caused by adding the server to the Domain at the initial installation of the OS, which was the what happend in my case. Here are a couple links to articles I followed to correct this problem. Hope this helps!

http://www.petri.co.il/troubleshooting_dcpromo_errors.htm

http://support.microsoft.com/default.aspx?scid=kb;en-us;257623

This discussion is closed to new replies.