Unable to promote member server to DC

  • Thread starter Thread starter Arvind Shukla
  • Start date Start date
A

Arvind Shukla

I have installed Windows 2000 server with Service pack
4.I want to promote it to Domain controller of existing
domain. When I run DCPROMO it fails:
"Failed to modify properties for MachineName$:Acces
denied"

Administrator password is correct ,which is used to log
on to Domain Controller & same is used for Active
Directory restoration also. Administrator is member of
Schema Admin,Enterprise Admin,Domain Admin etc.

Any help for this problem.

Thanks
 
Most of the time promotion problems are DNS related.
If it were me I would NOT have the admin in the schema admin group!! Very
bad practice. I would create a user just for this purpose and keep it
disabled when not in use. Schema modifications are seldom and this makes the
modification a deliberate act. Just think of what will happen when someone
writes a virus for users who do this because it's easier. Ultimately you
shouldn't even be a Admin or domain admin and use the secondary logon
service. Keeps things protected and EVERYTHING you do is deliberate rather
than accidental.
 
Problem is solved.
Link to Domain Controller policy was found missing from
Domain Controller's OU.
 
Back
Top