Windows Forum

Ask something
Discussion Locked

Acess Denied while adding a BDC

0 helpful
5 replies

by tryagain

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I tried to add another windows 2000 advanced server family as a BDC for an exsisting domain controller.I started active directory setup wizard & selected additional DC, after setting the paths, it started to process then I got this error message :
The operation failed because : Failed to modify the necessary properties for the machine account (name)$ "Access is denied"
I have used administrator password to join the domain

5 replies

by f_somers

Hi,

did you use the DOMAIN Administrator account? is your DNS / WINS setup correctly? In what form did you enter the Userame? It should be in the form of "DOMAIN\USERNAME" and NOT "USERNAME@DOMAIN.COM".

Hope this helps,

FS

by tryagain

Hi again,
I had entered the username correctly & tested the way you told me too.
But the problem was in another way,
Trust for delegation policy was set to None & administrator is unable to change/add any BDC to the domain too.
this was the problem & thank you for your attention

by mikel~t

Do you have active directory established in the native mode? If so, once you've created the BDC's computer account in the active directory structure, and you've logged onto the BDC, you should be able to use Active Directory setup to add the BDC tothe existing domain. I ran into a simialar problem when I tried to add a BDC to my ADS domain.

To change the domain mode (this is right out of the windows Help Utility)

Open Active Directory Domains and Trusts.
Right-click the domain node for the domain you want to administer, and then click Properties.
On the General tab, click Change Mode, and then click Yes.
Caution

Do not change domain mode if you have or will have any Windows NT 4.0 domain controllers. You can only change the mode from mixed mode to native mode. Once a domain is running in native mode, it cannot be changed back to mixed mode.
Notes

To open Active Directory Domains and Trusts, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Domains and Trusts.
For more information about domain modes, see Related Topics.

Hope this helps.

Mike

This discussion is closed to new replies.