Error while dcpromo an additional domain controller in Win2k Serve

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I do receive this error when try to dcpromo an additional domain controller
in Win2k Server - the DC in running on Win2k Server and additional need to be
dcpromo also is Win2k Server

The error I do encounter is :

The operation failed because: The Directory Service failed to create the
server object for CN=NTDS
Settings,CN=MAVCAP-STG1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mavcap,DC=com
on server mavcap-dc.mavcap.com. Please ensure the network credentials
provided have sufficient access to add a replica. "Access is denied. "

- I have try to use the enterprise admin / administartor accounts also failed.

Please help me on this issue

-muthu-
 
Hi,

Well for starters, make sure this machine is pointed to a DC already in
the network for primary DNS.

I have seen this where it is not the credentials that are being denied
but the domain name.
The screen where you have type the user name, password, and USER DOMAIN
of the user account you want to use for this operation is where the
problem might be.
I have found that when DCPROMO asks for the userid, password, and
domain it can be fussy.
When you DCPROMO the credentials box automatically shows domain.local
Change the domain to the netbios domain name instead of the FQDN.

Good luck
Power Your Active Directory Investment
www.specopssoft.com
 
Hi,

Well there are two suggestions above and no one has come back stating
that one or both did not resolve the issue.
Are you experiencing the same issue as the original post?
If so please explain the issue you are having in a bit more detail and
we all could bang heads to get it resolved.

Harj Singh
Power Your Active Directory Investment
www.specopssoft.com
 
Actually the scenario goes like this the system administrator promoted a new
domain controller and installed a lot of applications(Don't know why he
installed an application on the AD). He suddenly realized that he needs a
back domain controller so he asked me to create an additional domain
controller. During the promotion of additional domain controller I got the
same issue posted by Mu@2. My first work around is in DNS so I checked but I
found it pretty good. The next step I did is to check the entry on directory
so I use NTDSUTIL so far there was no other entry on directory. I also
updated the Windows 2000 server to make sure that it will work well before I
make an additional domain controller. Hope you could help me on this.
 
Hi,

Ok we have the the additional server pointed to your only domain
controller for primary DNS and we run DCpromo and generate the same
error, Please ensure the network credentials provided have sufficient
access to add a replica. "Access is denied. "?
Are you trying to join a W2K machine to a W2K3 domain functional level
and/or the forest functional level?
Have you looked at the DCpromo.log to see if that gives you anymore
info.

To determine the current functional level:
1. Open Active Directory Users and Computers on a Windows Server 2003
domain controller.
2. Right-click the domain in the left-hand pane and press Properties.
3. The Domain function level and Forest functional level appear on the
General tab.


Good luck

Harj Singh
Power Your Active Directory Investment
www.specopssoft.com
 
Back
Top