To All,

When trying to add a second AD (as a back-up) on a Win2K server in my SBS
domain I got the error:
"Failed to modify the necessary properties for machine account..." "Acces
denied"

I have verified MS articles 250874, 232070 and 308311 but none helped. Some
say you can't add a seccond AD to an SBS domain others says there is no
reason why not.

Some one has an idee where to look or what to do??

tnx in advance
Jean Paul

Re: Error Adding AD to domaine by Terry

Terry
Fri Jul 11 04:05:44 PDT 2008

This should help you out.

http://blogs.technet.com/sbs/archive/2007/10/04/debunking-the-myth-about-additional-domain-controllers-replica-dcs-in-an-sbs-domain.aspx

"Jean Paul Mertens" <ON7AMI@newsgroups.nospam> wrote in message
news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl...
> To All,
>
> When trying to add a second AD (as a back-up) on a Win2K server in my SBS
> domain I got the error:
> "Failed to modify the necessary properties for machine account..." "Acces
> denied"
>
> I have verified MS articles 250874, 232070 and 308311 but none helped.
> Some say you can't add a seccond AD to an SBS domain others says there is
> no reason why not.
>
> Some one has an idee where to look or what to do??
>
> tnx in advance
> Jean Paul
>


Re: Error Adding AD to domaine by Cris

Cris
Fri Jul 11 07:46:09 PDT 2008

This is a multi-part message in MIME format.

------=_NextPart_000_0011_01C8E33A.F2891EA0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

A server can only be a member of one AD domain to the best of my =
knowledge

If you are attempting to create a trust between two domains, then SBS =
does not support trusts.

OR am I misunderstanding

And you want to make the Win2k server a Domain Controller in the SBS =
domain?

--=20
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues

"Jean Paul Mertens" <ON7AMI@newsgroups.nospam> wrote in message =
news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl...
To All,

When trying to add a second AD (as a back-up) on a Win2K server in my =
SBS=20
domain I got the error:
"Failed to modify the necessary properties for machine account..." =
"Acces=20
denied"

I have verified MS articles 250874, 232070 and 308311 but none helped. =
Some=20
say you can't add a seccond AD to an SBS domain others says there is no=20
reason why not.

Some one has an idee where to look or what to do??

tnx in advance
Jean Paul=20


------=_NextPart_000_0011_01C8E33A.F2891EA0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.3354" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>A server can only be a member of one AD =
domain to=20
the best of my knowledge</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>If you are attempting to create a trust =
between two=20
domains, then SBS does not support trusts.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>OR am I misunderstanding</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>And you want to make the Win2k server a =
Domain=20
Controller in the SBS domain?</FONT></DIV>
<DIV><BR>-- <BR>Cris Hanna=20
[SBS-MVP]<BR>-------------------------------------------------<BR>Microso=
ft=20
MVPs<BR>&nbsp;Independent Experts (MVPs do not work for MS)<BR>Real =
World=20
Answers<BR>---------------------------------------------------------<BR>P=
lease=20
do not contact me directly regarding issues<BR></DIV>
<DIV>"Jean Paul Mertens" &lt;<A=20
href=3D"mailto:ON7AMI@newsgroups.nospam">ON7AMI@newsgroups.nospam</A>&gt;=
wrote in=20
message <A=20
href=3D"news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl">news:exmVWWz4IHA.4392=
@TK2MSFTNGP03.phx.gbl</A>...</DIV>To=20
All,<BR><BR>When trying to add a second AD (as a back-up) on a Win2K =
server in=20
my SBS <BR>domain I got the error:<BR>"Failed to modify the necessary =
properties=20
for machine account..." "Acces <BR>denied"<BR><BR>I have verified MS =
articles=20
250874, 232070 and 308311 but none helped. Some <BR>say you can't add a =
seccond=20
AD to an SBS domain others says there is no <BR>reason why =
not.<BR><BR>Some one=20
has an idee where to look or what to do??<BR><BR>tnx in advance<BR>Jean =
Paul=20
<BR><BR></BODY></HTML>

------=_NextPart_000_0011_01C8E33A.F2891EA0--


Re: Error Adding AD to domaine by Jean

Jean
Fri Jul 11 08:32:33 PDT 2008

This is a multi-part message in MIME format.

------=_NextPart_000_0081_01C8E37C.1BC982A0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Cris and Terry,

I have an SBS as Domain controller for the moment and I just want to =
instal a Replica DC as a backup becourse my SBS is ill :-).

The final goal is to take the SBS out of the domain and to migrate to an =
standard W2k3 domain with a separate SQL and a separate Exchange server =
and a separate w2k3 as Domain controller. As a first aid I want to =
install the replica DC so that I have a backup AD when somethings go =
wrong with the ADprep.

so for the moment there is only one domain with one domain controller =
(the SBS) and all other servers are simple member servers.

tnx for reply

"Cris Hanna [SBS-MVP]" <crisnospamhanna@cpunospamservices.net> schreef =
in bericht news:OwQkcT24IHA.1428@TK2MSFTNGP06.phx.gbl...
A server can only be a member of one AD domain to the best of my =
knowledge

If you are attempting to create a trust between two domains, then SBS =
does not support trusts.

OR am I misunderstanding

And you want to make the Win2k server a Domain Controller in the SBS =
domain?

--=20
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues

"Jean Paul Mertens" <ON7AMI@newsgroups.nospam> wrote in message =
news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl...
To All,

When trying to add a second AD (as a back-up) on a Win2K server in my =
SBS=20
domain I got the error:
"Failed to modify the necessary properties for machine account..." =
"Acces=20
denied"

I have verified MS articles 250874, 232070 and 308311 but none helped. =
Some=20
say you can't add a seccond AD to an SBS domain others says there is =
no=20
reason why not.

Some one has an idee where to look or what to do??

tnx in advance
Jean Paul=20


------=_NextPart_000_0081_01C8E37C.1BC982A0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.6000.16674" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Cris and Terry,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>I have an SBS as Domain controller for =
the moment=20
and I just want to instal a Replica DC as a backup becourse my SBS is =
ill=20
:-).</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>The final&nbsp;goal is to take the SBS =
out of the=20
domain and to migrate to an standard W2k3 domain with a separate SQL and =
a=20
separate Exchange server and a separate w2k3 as&nbsp;Domain controller. =
As a=20
first aid I want to install the replica DC so that I have a backup AD =
when=20
somethings go wrong with the ADprep.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>so for the moment&nbsp;there is only =
one domain=20
with one domain controller (the SBS) and all other servers are simple =
member=20
servers.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>tnx for reply</FONT></DIV>
<DIV>&nbsp;</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Cris Hanna [SBS-MVP]" &lt;<A=20
=
href=3D"mailto:crisnospamhanna@cpunospamservices.net">crisnospamhanna@cpu=
nospamservices.net</A>&gt;=20
schreef in bericht <A=20
=
href=3D"news:OwQkcT24IHA.1428@TK2MSFTNGP06.phx.gbl">news:OwQkcT24IHA.1428=
@TK2MSFTNGP06.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>A server can only be a member of one =
AD domain to=20
the best of my knowledge</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>If you are attempting to create a =
trust between=20
two domains, then SBS does not support trusts.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>OR am I misunderstanding</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>And you want to make the Win2k server =
a Domain=20
Controller in the SBS domain?</FONT></DIV>
<DIV><BR>-- <BR>Cris Hanna=20
=
[SBS-MVP]<BR>-------------------------------------------------<BR>Microso=
ft=20
MVPs<BR>&nbsp;Independent Experts (MVPs do not work for MS)<BR>Real =
World=20
=
Answers<BR>---------------------------------------------------------<BR>P=
lease=20
do not contact me directly regarding issues<BR></DIV>
<DIV>"Jean Paul Mertens" &lt;<A=20
=
href=3D"mailto:ON7AMI@newsgroups.nospam">ON7AMI@newsgroups.nospam</A>&gt;=
wrote=20
in message <A=20
=
href=3D"news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl">news:exmVWWz4IHA.4392=
@TK2MSFTNGP03.phx.gbl</A>...</DIV>To=20
All,<BR><BR>When trying to add a second AD (as a back-up) on a Win2K =
server in=20
my SBS <BR>domain I got the error:<BR>"Failed to modify the necessary=20
properties for machine account..." "Acces <BR>denied"<BR><BR>I have =
verified=20
MS articles 250874, 232070 and 308311 but none helped. Some <BR>say =
you can't=20
add a seccond AD to an SBS domain others says there is no <BR>reason =
why=20
not.<BR><BR>Some one has an idee where to look or what to =
do??<BR><BR>tnx in=20
advance<BR>Jean Paul <BR><BR></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0081_01C8E37C.1BC982A0--


Re: Error Adding AD to domaine by Jean

Jean
Fri Jul 11 08:33:43 PDT 2008

Terry,

Tnx I'll take a look at it and give it a try.

P.S. so also answer to Cris.

Greets
Jean Paul

"Terry" <terry@nospamsandcreektelco.com> schreef in bericht
news:023F43F2-C0E3-4C80-8EED-91ACB035E286@microsoft.com...
> This should help you out.
>
> http://blogs.technet.com/sbs/archive/2007/10/04/debunking-the-myth-about-additional-domain-controllers-replica-dcs-in-an-sbs-domain.aspx
>
> "Jean Paul Mertens" <ON7AMI@newsgroups.nospam> wrote in message
> news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl...
>> To All,
>>
>> When trying to add a second AD (as a back-up) on a Win2K server in my SBS
>> domain I got the error:
>> "Failed to modify the necessary properties for machine account..." "Acces
>> denied"
>>
>> I have verified MS articles 250874, 232070 and 308311 but none helped.
>> Some say you can't add a seccond AD to an SBS domain others says there is
>> no reason why not.
>>
>> Some one has an idee where to look or what to do??
>>
>> tnx in advance
>> Jean Paul
>>
>



Re: Error Adding AD to domaine by Cris

Cris
Sat Jul 12 13:40:51 PDT 2008

This is a multi-part message in MIME format.

------=_NextPart_000_0027_01C8E435.A9E07BC0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Not sure why would you would do this with a Win2k Server rather than a =
Win2k3 server

If you did not join this server using the connectcomputer wizard. I =
encourage you to take it back to workgroup...then rejoin to the SBS =
domain using the connectcomputer wizard.

Then using the SBS CD, before running DCPromo on the Win2k server, =
you'll need to run ADPREP /forestprep (from the SBS CD) and then run =
ADPREP /domainprep (using the SBS cds) on the Win2k server
Then you can try the DC Promo

--=20
Cris Hanna [SBS - MVP]
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.
"Jean Paul Mertens" <ON7AMI@newsgroups.nospam> wrote in message =
news:%23Sw5Zt24IHA.4272@TK2MSFTNGP03.phx.gbl...
Cris and Terry,

I have an SBS as Domain controller for the moment and I just want to =
instal a Replica DC as a backup becourse my SBS is ill :-).

The final goal is to take the SBS out of the domain and to migrate to an =
standard W2k3 domain with a separate SQL and a separate Exchange server =
and a separate w2k3 as Domain controller. As a first aid I want to =
install the replica DC so that I have a backup AD when somethings go =
wrong with the ADprep.

so for the moment there is only one domain with one domain controller =
(the SBS) and all other servers are simple member servers.

tnx for reply

"Cris Hanna [SBS-MVP]" <crisnospamhanna@cpunospamservices.net> schreef =
in bericht news:OwQkcT24IHA.1428@TK2MSFTNGP06.phx.gbl...
A server can only be a member of one AD domain to the best of my =
knowledge

If you are attempting to create a trust between two domains, then SBS =
does not support trusts.

OR am I misunderstanding

And you want to make the Win2k server a Domain Controller in the SBS =
domain?

--=20
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues

"Jean Paul Mertens" <ON7AMI@newsgroups.nospam> wrote in message =
news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl...
To All,

When trying to add a second AD (as a back-up) on a Win2K server in my =
SBS=20
domain I got the error:
"Failed to modify the necessary properties for machine account..." =
"Acces=20
denied"

I have verified MS articles 250874, 232070 and 308311 but none helped. =
Some=20
say you can't add a seccond AD to an SBS domain others says there is =
no=20
reason why not.

Some one has an idee where to look or what to do??

tnx in advance
Jean Paul=20


------=_NextPart_000_0027_01C8E435.A9E07BC0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.6001.18063" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>
<DIV><FONT face=3DArial size=3D2>Not sure why would you would do this =
with a Win2k=20
Server rather than a Win2k3 server</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>If you did not join this server using =
the=20
connectcomputer wizard.&nbsp; I encourage you to take it back to=20
workgroup...then rejoin to the SBS domain using the connectcomputer=20
wizard.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Then using the SBS CD, before running =
DCPromo on=20
the Win2k server, you'll need to run ADPREP /forestprep&nbsp;(from the =
SBS CD)=20
and then run ADPREP /domainprep (using the SBS cds) on the Win2k=20
server</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Then you can try the DC =
Promo</FONT></DIV></DIV>
<DIV><BR>-- <BR>Cris Hanna [SBS -=20
MVP]<BR>------------------------------------<BR>MVPs do not work for=20
Microsoft<BR>Please do not submit questions directly to me.</DIV>
<DIV>"Jean Paul Mertens" &lt;<A=20
href=3D"mailto:ON7AMI@newsgroups.nospam">ON7AMI@newsgroups.nospam</A>&gt;=
wrote in=20
message <A=20
href=3D"news:%23Sw5Zt24IHA.4272@TK2MSFTNGP03.phx.gbl">news:%23Sw5Zt24IHA.=
4272@TK2MSFTNGP03.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Cris and Terry,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>I have an SBS as Domain controller for =
the moment=20
and I just want to instal a Replica DC as a backup becourse my SBS is =
ill=20
:-).</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>The final&nbsp;goal is to take the SBS =
out of the=20
domain and to migrate to an standard W2k3 domain with a separate SQL and =
a=20
separate Exchange server and a separate w2k3 as&nbsp;Domain controller. =
As a=20
first aid I want to install the replica DC so that I have a backup AD =
when=20
somethings go wrong with the ADprep.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>so for the moment&nbsp;there is only =
one domain=20
with one domain controller (the SBS) and all other servers are simple =
member=20
servers.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>tnx for reply</FONT></DIV>
<DIV>&nbsp;</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Cris Hanna [SBS-MVP]" &lt;<A=20
=
href=3D"mailto:crisnospamhanna@cpunospamservices.net">crisnospamhanna@cpu=
nospamservices.net</A>&gt;=20
schreef in bericht <A=20
=
href=3D"news:OwQkcT24IHA.1428@TK2MSFTNGP06.phx.gbl">news:OwQkcT24IHA.1428=
@TK2MSFTNGP06.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>A server can only be a member of one =
AD domain to=20
the best of my knowledge</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>If you are attempting to create a =
trust between=20
two domains, then SBS does not support trusts.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>OR am I misunderstanding</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>And you want to make the Win2k server =
a Domain=20
Controller in the SBS domain?</FONT></DIV>
<DIV><BR>-- <BR>Cris Hanna=20
=
[SBS-MVP]<BR>-------------------------------------------------<BR>Microso=
ft=20
MVPs<BR>&nbsp;Independent Experts (MVPs do not work for MS)<BR>Real =
World=20
=
Answers<BR>---------------------------------------------------------<BR>P=
lease=20
do not contact me directly regarding issues<BR></DIV>
<DIV>"Jean Paul Mertens" &lt;<A=20
=
href=3D"mailto:ON7AMI@newsgroups.nospam">ON7AMI@newsgroups.nospam</A>&gt;=
wrote=20
in message <A=20
=
href=3D"news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl">news:exmVWWz4IHA.4392=
@TK2MSFTNGP03.phx.gbl</A>...</DIV>To=20
All,<BR><BR>When trying to add a second AD (as a back-up) on a Win2K =
server in=20
my SBS <BR>domain I got the error:<BR>"Failed to modify the necessary=20
properties for machine account..." "Acces <BR>denied"<BR><BR>I have =
verified=20
MS articles 250874, 232070 and 308311 but none helped. Some <BR>say =
you can't=20
add a seccond AD to an SBS domain others says there is no <BR>reason =
why=20
not.<BR><BR>Some one has an idee where to look or what to =
do??<BR><BR>tnx in=20
advance<BR>Jean Paul <BR><BR></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0027_01C8E435.A9E07BC0--


Re: Error Adding AD to domaine by Jean

Jean
Mon Jul 14 04:14:01 PDT 2008

Cris,

My SBS now is a 2000 version.

There is something wrong with my ATA (disccontroller or Disk), the software
mirror stopped functioning and I can't take a full backup nor a ghost. The
system is for the moment still functioning and I can take backup of machine
state, of Exchange and of SQL. So I live on the point of a knive :-( and a
mistake can crash the SBS. So I had the idee to first integrate a second AD
on a Win2000 server so I have not to run ADPREP. Once done this, I would
like to migrate to Exchange 2003 full and SQL 2005 Full and strip down the
SBS and migrate to a Windows2003 standard domain.

But for the moment I'm stuck on integrating the second Windows2000 server.

I tried to take the (new) server out of the domain - no problem
Tried to add it back on the domain using the connect wizard - no problem.
Tried to install AD and got at new the error 'The operation failed because:
Failed to modify the necessary properties of MYSERVERNAME$ "Access is
deneid"

Any suggestions...

Greets

Jean Paul
"Cris Hanna [SBS - MVP]" <crisnospamhanna@cpunospamservices.net> schreef in
bericht news:%23v3%23T%23F5IHA.1204@TK2MSFTNGP04.phx.gbl...
Not sure why would you would do this with a Win2k Server rather than a
Win2k3 server

If you did not join this server using the connectcomputer wizard. I
encourage you to take it back to workgroup...then rejoin to the SBS domain
using the connectcomputer wizard.

Then using the SBS CD, before running DCPromo on the Win2k server, you'll
need to run ADPREP /forestprep (from the SBS CD) and then run ADPREP
/domainprep (using the SBS cds) on the Win2k server
Then you can try the DC Promo

--
Cris Hanna [SBS - MVP]
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.
"Jean Paul Mertens" <ON7AMI@newsgroups.nospam> wrote in message
news:%23Sw5Zt24IHA.4272@TK2MSFTNGP03.phx.gbl...
Cris and Terry,

I have an SBS as Domain controller for the moment and I just want to instal
a Replica DC as a backup becourse my SBS is ill :-).

The final goal is to take the SBS out of the domain and to migrate to an
standard W2k3 domain with a separate SQL and a separate Exchange server and
a separate w2k3 as Domain controller. As a first aid I want to install the
replica DC so that I have a backup AD when somethings go wrong with the
ADprep.

so for the moment there is only one domain with one domain controller (the
SBS) and all other servers are simple member servers.

tnx for reply

"Cris Hanna [SBS-MVP]" <crisnospamhanna@cpunospamservices.net> schreef in
bericht news:OwQkcT24IHA.1428@TK2MSFTNGP06.phx.gbl...
A server can only be a member of one AD domain to the best of my knowledge

If you are attempting to create a trust between two domains, then SBS does
not support trusts.

OR am I misunderstanding

And you want to make the Win2k server a Domain Controller in the SBS domain?

--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues

"Jean Paul Mertens" <ON7AMI@newsgroups.nospam> wrote in message
news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl...
To All,

When trying to add a second AD (as a back-up) on a Win2K server in my SBS
domain I got the error:
"Failed to modify the necessary properties for machine account..." "Acces
denied"

I have verified MS articles 250874, 232070 and 308311 but none helped. Some
say you can't add a seccond AD to an SBS domain others says there is no
reason why not.

Some one has an idee where to look or what to do??

tnx in advance
Jean Paul



Re: Error Adding AD to domaine by Jean

Jean
Mon Jul 14 04:21:46 PDT 2008

Terry,

No succes, the paper discribes exactly what I have done, see my mail to Cris
in same treath.

Greets

"Terry" <terry@nospamsandcreektelco.com> schreef in bericht
news:023F43F2-C0E3-4C80-8EED-91ACB035E286@microsoft.com...
> This should help you out.
>
> http://blogs.technet.com/sbs/archive/2007/10/04/debunking-the-myth-about-additional-domain-controllers-replica-dcs-in-an-sbs-domain.aspx
>
> "Jean Paul Mertens" <ON7AMI@newsgroups.nospam> wrote in message
> news:exmVWWz4IHA.4392@TK2MSFTNGP03.phx.gbl...
>> To All,
>>
>> When trying to add a second AD (as a back-up) on a Win2K server in my SBS
>> domain I got the error:
>> "Failed to modify the necessary properties for machine account..." "Acces
>> denied"
>>
>> I have verified MS articles 250874, 232070 and 308311 but none helped.
>> Some say you can't add a seccond AD to an SBS domain others says there is
>> no reason why not.
>>
>> Some one has an idee where to look or what to do??
>>
>> tnx in advance
>> Jean Paul
>>
>