Account Privileges for Additional DC

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

we are runing Windows 2000 Adv. Server with Exchange 2000 Standard Edition on
the same server, now when we plan to migrate to server 2003 we are facing
some problems. when we join the 2003 machine as Additional DC to Server 2000
it starts replicating and suddenly the error msg comes and replication stops.
error msg is
The operation failed because: The Active Directory Installation wizard was
unable to convert the computer account MAIL$ to a domain controller account.
"Access is denied" and it again asks for user name and password with a msg "
Type a user name and password of an account with sufficient privilges to
create an additional domain controller for the abc.com domain"

pls let me know after administrator acc. being used why it is giving such
errors or if we use another account, what rights should be given to that?

TIA

we are doing this with administrator account.
 
In
Farhan Khan said:
we are runing Windows 2000 Adv. Server with Exchange 2000 Standard
Edition on the same server, now when we plan to migrate to server
2003 we are facing some problems. when we join the 2003 machine as
Additional DC to Server 2000 it starts replicating and suddenly the
error msg comes and replication stops. error msg is
The operation failed because: The Active Directory Installation
wizard was unable to convert the computer account MAIL$ to a domain
controller account. "Access is denied" and it again asks for user
name and password with a msg " Type a user name and password of an
account with sufficient privilges to create an additional domain
controller for the abc.com domain"

pls let me know after administrator acc. being used why it is giving
such errors or if we use another account, what rights should be given
to that?

TIA

we are doing this with administrator account.
Click to expand...

Did you run adprep /forestprep and then adprep /domainprep first?

When supplying the credentials, I assume it's being entered as
administrator, password, and using the "domain.com " format for the domain
name?

Is the machine pointing only to the current DNS server or is there another
entry (such as an ISP's)?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Microsot Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================
 
we are runing Windows 2000 Adv. Server with Exchange 2000
Standard Edition on
the same server, now when we plan to migrate to server 2003 we
are facing
some problems. when we join the 2003 machine as Additional DC
to Server 2000
it starts replicating and suddenly the error msg comes and
replication stops.
error msg is
The operation failed because: The Active Directory
Installation wizard was
unable to convert the computer account MAIL$ to a domain
controller account.
"Access is denied" and it again asks for user name and
password with a msg "
Type a user name and password of an account with sufficient
privilges to
create an additional domain controller for the abc.com domain"

pls let me know after administrator acc. being used why it is
giving such
errors or if we use another account, what rights should be
given to that?

TIA

we are doing this with administrator account.
Click to expand...

are you using the administrator account of the server (local) or the
domain?
 
first i ran adprep /forestprep, afterthat adprep /domainprep ...it also shows
the msg that it is successfullyu completed.

and yes indeed it is supplied as administrator, password and domain name.

and it is only pointing to the current DNS Server which is setup on the same
machine.
 
In
Farhan Khan said:
first i ran adprep /forestprep, afterthat adprep /domainprep ...it
also shows the msg that it is successfullyu completed.

and yes indeed it is supplied as administrator, password and domain
name.

and it is only pointing to the current DNS Server which is setup on
the same machine.
Click to expand...

Are there any errors un the Event logs on the DC?
How about the machine you are attempting to create as a replica DC?

It may come down, assuming the machine you are trying to join is called
"mail", to manually disjoin the machine from the domain, delete the computer
account, and then attempt to promote it.

Is this "mail" server an Exchange server?

Ace
 
Back
Top