I am trying to create an addtional Domain Controller using Windows 2000 server, but it gives me a problem “Failed to modify the necessary properties for the machine account (Access is denied)” I have followed the many links to this as it is a bug and has come up but still it is not working I am logging into the machine i am trying to promote as admin Should I log into domain or local computer account as admin.I have dbl checked the trust for delegation and my username is on that list any help would be appreciated