Problems adding BDC

  • Thread starter Thread starter Daniel H.Herrmann Doering
  • Start date Start date
D

Daniel H.Herrmann Doering

Hi,

I'm trying to add a Windows 2000 Server Computer as a BDC to an existing
Windows 2000 domain.
Dcpromo terminates with an error message telling me that a don't it's not
posible to change the machine account of the new server in AD.

Dcpromo.log shows the following entries:

02/19 12:03:50 [INFO] Promotion request for replica domain controller
02/19 12:03:50 [INFO] DnsDomainName terramex.com.mx
02/19 12:03:50 [INFO] ReplicaPartner (NULL)
02/19 12:03:50 [INFO] SiteName (NULL)
02/19 12:03:50 [INFO] DsDatabasePath C:\WINNT\NTDS, DsLogPath
C:\WINNT\NTDS
02/19 12:03:50 [INFO] SystemVolumeRootPath C:\WINNT\SYSVOL
02/19 12:03:50 [INFO] Account terramex.com.mx\tamsys
02/19 12:03:50 [INFO] Options 196
02/19 12:03:50 [INFO] Validate supplied paths
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\SYSVOL.
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Path is on an NTFS volume
02/19 12:03:50 [INFO] Start the worker task
02/19 12:03:50 [INFO] Request for promotion returning 0
02/19 12:03:50 [INFO] Buscando el controlador de dominio del dominio
terramex.com.mx que contiene la cuenta TEMXMEXW01$
02/19 12:03:50 [INFO] Se encontró el controlador de dominio
temxtamw01.terramex.com.mx para el dominio terramex.com.mx
02/19 12:03:50 [INFO] Usando el sitio Mexico para el servidor
\\temxtamw01.terramex.com.mx
02/19 12:03:50 [INFO] Forcing time sync
02/19 12:03:50 [INFO] Forzando una sincronización de tiempo con
\\temxtamw01.terramex.com.mx
02/19 12:03:53 [INFO] Setting machine account to be DC
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:53 [INFO] Searching for the machine account for TEMXMEXW01$ on
\\temxtamw01.terramex.com.mx...
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:56 [INFO] NtdsSetReplicaMachineAccount returned 58
02/19 12:03:56 [INFO] DsRolepSetMachineAccountType returned 58
02/19 12:03:56 [INFO] Error - No se puede modificar las propiedades
necesarias de la cuenta de equipo TEMXMEXW01$
(58)
02/19 12:03:56 [INFO] Se ha completado la operación de controlador de
dominio
02/19 12:03:56 [INFO] DsRolepSetOperationDone returned 0

I checked Microsoft Knowledge Base Article - 250874 and everything looks
fine.

Does anyone has an idea what's wrong?

Regards,

Daniel
 
That article should resolve the issue. Did you make sure that the change
was made in the default domain controllers policy? You need to verify that
the administrators group has "Enable computer and users accounts to be
trusted for delegation ".

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Daniel H.Herrmann Doering said:
Hi,

I'm trying to add a Windows 2000 Server Computer as a BDC to an existing
Windows 2000 domain.
Dcpromo terminates with an error message telling me that a don't it's not
posible to change the machine account of the new server in AD.

Dcpromo.log shows the following entries:

02/19 12:03:50 [INFO] Promotion request for replica domain controller
02/19 12:03:50 [INFO] DnsDomainName terramex.com.mx
02/19 12:03:50 [INFO] ReplicaPartner (NULL)
02/19 12:03:50 [INFO] SiteName (NULL)
02/19 12:03:50 [INFO] DsDatabasePath C:\WINNT\NTDS, DsLogPath
C:\WINNT\NTDS
02/19 12:03:50 [INFO] SystemVolumeRootPath C:\WINNT\SYSVOL
02/19 12:03:50 [INFO] Account terramex.com.mx\tamsys
02/19 12:03:50 [INFO] Options 196
02/19 12:03:50 [INFO] Validate supplied paths
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\SYSVOL.
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Path is on an NTFS volume
02/19 12:03:50 [INFO] Start the worker task
02/19 12:03:50 [INFO] Request for promotion returning 0
02/19 12:03:50 [INFO] Buscando el controlador de dominio del dominio
terramex.com.mx que contiene la cuenta TEMXMEXW01$
02/19 12:03:50 [INFO] Se encontró el controlador de dominio
temxtamw01.terramex.com.mx para el dominio terramex.com.mx
02/19 12:03:50 [INFO] Usando el sitio Mexico para el servidor
\\temxtamw01.terramex.com.mx
02/19 12:03:50 [INFO] Forcing time sync
02/19 12:03:50 [INFO] Forzando una sincronización de tiempo con
\\temxtamw01.terramex.com.mx
02/19 12:03:53 [INFO] Setting machine account to be DC
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:53 [INFO] Searching for the machine account for TEMXMEXW01$ on
\\temxtamw01.terramex.com.mx...
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:56 [INFO] NtdsSetReplicaMachineAccount returned 58
02/19 12:03:56 [INFO] DsRolepSetMachineAccountType returned 58
02/19 12:03:56 [INFO] Error - No se puede modificar las propiedades
necesarias de la cuenta de equipo TEMXMEXW01$
(58)
02/19 12:03:56 [INFO] Se ha completado la operación de controlador de
dominio
02/19 12:03:56 [INFO] DsRolepSetOperationDone returned 0

I checked Microsoft Knowledge Base Article - 250874 and everything looks
fine.

Does anyone has an idea what's wrong?

Regards,

Daniel
Click to expand...
 
Yes I checked this.
Yesterday I made another test and if I setup yhe BDC in the same LAN
segment, I don't have any problem to install.
The problem I mentioned is when I put the BDC in a WAN evoiremnet with an
128k conection between the two networks.
Looks loke routing is ok, both machines can access each other.

Daniel


Tim Hines said:
That article should resolve the issue. Did you make sure that the change
was made in the default domain controllers policy? You need to verify that
the administrators group has "Enable computer and users accounts to be
trusted for delegation ".

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Daniel H.Herrmann Doering said:
Hi,

I'm trying to add a Windows 2000 Server Computer as a BDC to an existing
Windows 2000 domain.
Dcpromo terminates with an error message telling me that a don't it's not
posible to change the machine account of the new server in AD.

Dcpromo.log shows the following entries:

02/19 12:03:50 [INFO] Promotion request for replica domain controller
02/19 12:03:50 [INFO] DnsDomainName terramex.com.mx
02/19 12:03:50 [INFO] ReplicaPartner (NULL)
02/19 12:03:50 [INFO] SiteName (NULL)
02/19 12:03:50 [INFO] DsDatabasePath C:\WINNT\NTDS, DsLogPath
C:\WINNT\NTDS
02/19 12:03:50 [INFO] SystemVolumeRootPath C:\WINNT\SYSVOL
02/19 12:03:50 [INFO] Account terramex.com.mx\tamsys
02/19 12:03:50 [INFO] Options 196
02/19 12:03:50 [INFO] Validate supplied paths
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\SYSVOL.
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Path is on an NTFS volume
02/19 12:03:50 [INFO] Start the worker task
02/19 12:03:50 [INFO] Request for promotion returning 0
02/19 12:03:50 [INFO] Buscando el controlador de dominio del dominio
terramex.com.mx que contiene la cuenta TEMXMEXW01$
02/19 12:03:50 [INFO] Se encontró el controlador de dominio
temxtamw01.terramex.com.mx para el dominio terramex.com.mx
02/19 12:03:50 [INFO] Usando el sitio Mexico para el servidor
\\temxtamw01.terramex.com.mx
02/19 12:03:50 [INFO] Forcing time sync
02/19 12:03:50 [INFO] Forzando una sincronización de tiempo con
\\temxtamw01.terramex.com.mx
02/19 12:03:53 [INFO] Setting machine account to be DC
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:53 [INFO] Searching for the machine account for TEMXMEXW01$ on
\\temxtamw01.terramex.com.mx...
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:56 [INFO] NtdsSetReplicaMachineAccount returned 58
02/19 12:03:56 [INFO] DsRolepSetMachineAccountType returned 58
02/19 12:03:56 [INFO] Error - No se puede modificar las propiedades
necesarias de la cuenta de equipo TEMXMEXW01$
(58)
02/19 12:03:56 [INFO] Se ha completado la operación de controlador de
dominio
02/19 12:03:56 [INFO] DsRolepSetOperationDone returned 0

I checked Microsoft Knowledge Base Article - 250874 and everything looks
fine.

Does anyone has an idea what's wrong?

Regards,

Daniel
Click to expand...
Click to expand...
 
Is there a firewall betwen the LANs. Since dcpromo works when the server is
on the LAN I would assume that there is a communications problem across the
WAN.

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Daniel H.Herrmann Doering said:
Yes I checked this.
Yesterday I made another test and if I setup yhe BDC in the same LAN
segment, I don't have any problem to install.
The problem I mentioned is when I put the BDC in a WAN evoiremnet with an
128k conection between the two networks.
Looks loke routing is ok, both machines can access each other.

Daniel


Tim Hines said:
That article should resolve the issue. Did you make sure that the change
was made in the default domain controllers policy? You need to verify that
the administrators group has "Enable computer and users accounts to be
trusted for delegation ".

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Hi,

I'm trying to add a Windows 2000 Server Computer as a BDC to an existing
Windows 2000 domain.
Dcpromo terminates with an error message telling me that a don't it's not
posible to change the machine account of the new server in AD.

Dcpromo.log shows the following entries:

02/19 12:03:50 [INFO] Promotion request for replica domain controller
02/19 12:03:50 [INFO] DnsDomainName terramex.com.mx
02/19 12:03:50 [INFO] ReplicaPartner (NULL)
02/19 12:03:50 [INFO] SiteName (NULL)
02/19 12:03:50 [INFO] DsDatabasePath C:\WINNT\NTDS, DsLogPath
C:\WINNT\NTDS
02/19 12:03:50 [INFO] SystemVolumeRootPath C:\WINNT\SYSVOL
02/19 12:03:50 [INFO] Account terramex.com.mx\tamsys
02/19 12:03:50 [INFO] Options 196
02/19 12:03:50 [INFO] Validate supplied paths
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\SYSVOL.
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Path is on an NTFS volume
02/19 12:03:50 [INFO] Start the worker task
02/19 12:03:50 [INFO] Request for promotion returning 0
02/19 12:03:50 [INFO] Buscando el controlador de dominio del dominio
terramex.com.mx que contiene la cuenta TEMXMEXW01$
02/19 12:03:50 [INFO] Se encontró el controlador de dominio
temxtamw01.terramex.com.mx para el dominio terramex.com.mx
02/19 12:03:50 [INFO] Usando el sitio Mexico para el servidor
\\temxtamw01.terramex.com.mx
02/19 12:03:50 [INFO] Forcing time sync
02/19 12:03:50 [INFO] Forzando una sincronización de tiempo con
\\temxtamw01.terramex.com.mx
02/19 12:03:53 [INFO] Setting machine account to be DC
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:53 [INFO] Searching for the machine account for
Click to expand...
Click to expand...
TEMXMEXW01$
on
\\temxtamw01.terramex.com.mx...
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:56 [INFO] NtdsSetReplicaMachineAccount returned 58
02/19 12:03:56 [INFO] DsRolepSetMachineAccountType returned 58
02/19 12:03:56 [INFO] Error - No se puede modificar las propiedades
necesarias de la cuenta de equipo TEMXMEXW01$
(58)
02/19 12:03:56 [INFO] Se ha completado la operación de controlador de
dominio
02/19 12:03:56 [INFO] DsRolepSetOperationDone returned 0

I checked Microsoft Knowledge Base Article - 250874 and everything looks
fine.

Does anyone has an idea what's wrong?

Regards,

Daniel
Click to expand...
Click to expand...
Click to expand...
 
Hmmmm,

I'm not sure. But there is no problem to add the server to the domain and
it's also posible to explore the folders on the PDC.

Daniel


Tim Hines said:
Is there a firewall betwen the LANs. Since dcpromo works when the server is
on the LAN I would assume that there is a communications problem across the
WAN.

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Daniel H.Herrmann Doering said:
Yes I checked this.
Yesterday I made another test and if I setup yhe BDC in the same LAN
segment, I don't have any problem to install.
The problem I mentioned is when I put the BDC in a WAN evoiremnet with an
128k conection between the two networks.
Looks loke routing is ok, both machines can access each other.

Daniel


"Tim Hines [MSFT]" <[email protected]> escribió en el mensaje
That article should resolve the issue. Did you make sure that the change
was made in the default domain controllers policy? You need to verify that
the administrators group has "Enable computer and users accounts to be
trusted for delegation ".

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Hi,

I'm trying to add a Windows 2000 Server Computer as a BDC to an existing
Windows 2000 domain.
Dcpromo terminates with an error message telling me that a don't
Click to expand...
it's
not
posible to change the machine account of the new server in AD.

Dcpromo.log shows the following entries:

02/19 12:03:50 [INFO] Promotion request for replica domain controller
02/19 12:03:50 [INFO] DnsDomainName terramex.com.mx
02/19 12:03:50 [INFO] ReplicaPartner (NULL)
02/19 12:03:50 [INFO] SiteName (NULL)
02/19 12:03:50 [INFO] DsDatabasePath C:\WINNT\NTDS, DsLogPath
C:\WINNT\NTDS
02/19 12:03:50 [INFO] SystemVolumeRootPath C:\WINNT\SYSVOL
02/19 12:03:50 [INFO] Account terramex.com.mx\tamsys
02/19 12:03:50 [INFO] Options 196
02/19 12:03:50 [INFO] Validate supplied paths
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\NTDS.
02/19 12:03:50 [INFO] Path is a directory
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Validating path C:\WINNT\SYSVOL.
02/19 12:03:50 [INFO] Path is on a fixed disk drive.
02/19 12:03:50 [INFO] Path is on an NTFS volume
02/19 12:03:50 [INFO] Start the worker task
02/19 12:03:50 [INFO] Request for promotion returning 0
02/19 12:03:50 [INFO] Buscando el controlador de dominio del dominio
terramex.com.mx que contiene la cuenta TEMXMEXW01$
02/19 12:03:50 [INFO] Se encontró el controlador de dominio
temxtamw01.terramex.com.mx para el dominio terramex.com.mx
02/19 12:03:50 [INFO] Usando el sitio Mexico para el servidor
\\temxtamw01.terramex.com.mx
02/19 12:03:50 [INFO] Forcing time sync
02/19 12:03:50 [INFO] Forzando una sincronización de tiempo con
\\temxtamw01.terramex.com.mx
02/19 12:03:53 [INFO] Setting machine account to be DC
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:53 [INFO] Searching for the machine account for
Click to expand...
TEMXMEXW01$
on
\\temxtamw01.terramex.com.mx...
02/19 12:03:53 [INFO] Configurando la cuenta del servidor
02/19 12:03:56 [INFO] NtdsSetReplicaMachineAccount returned 58
02/19 12:03:56 [INFO] DsRolepSetMachineAccountType returned 58
02/19 12:03:56 [INFO] Error - No se puede modificar las propiedades
necesarias de la cuenta de equipo TEMXMEXW01$
(58)
02/19 12:03:56 [INFO] Se ha completado la operación de controlador de
dominio
02/19 12:03:56 [INFO] DsRolepSetOperationDone returned 0

I checked Microsoft Knowledge Base Article - 250874 and everything looks
fine.

Does anyone has an idea what's wrong?

Regards,

Daniel
Click to expand...
Click to expand...
Click to expand...
 
Back
Top