adding another domain controller problem

I have installed a windows 2000 (server1) server and it's been working well
for the past 6 months. I have built another server (server2) offsite. I
have brought it to the office and I would like to add it to the active
directory of the first server. When I start the wizard, I get this message:

The operation failed because: Failed to modify the necessary properties for
the machine account server2$ Access is denied.

Any help is appreciated.

Did you join the domain first?

--
Scott Harding
MCSE, MCSA, A+, Network+
Microsoft MVP - Windows NT Server

"Peter McCaul" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> I have installed a windows 2000 (server1) server and it's been working
well
> for the past 6 months. I have built another server (server2) offsite. I
> have brought it to the office and I would like to add it to the active
> directory of the first server. When I start the wizard, I get this
message:
>
> The operation failed because: Failed to modify the necessary properties
for
> the machine account server2$ Access is denied.
>
> Any help is appreciated.
>
>

quoted from http://www.ChicagoTech.net
Failed to modify the necessary properties for the machine account
Symptom: When you run Dcpromo to create a replica domain controller, you may
receive the following error message: Failed to modify the necessary
properties for the machine account. Access is denied.

Cause: 1. The account that is used for the promotion operation may not been
assigned the "Delegation Privilege" right.
2. One of the operations that takes place during the promotion of a replica
domain controller is the modification of the UserAccountControl attribute
for the computer you are promoting.
3. When one or more domain controllers are on a Windows 2000 server that is
using NAT; and it can be caused by the H.323/Lightweight LDAP proxy service.


--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
Networking Solutions, http://www.chicagotech.net/networksolutions.htm
VPN Solutions, http://www.chicagotech.net/vpnsolutions.htm
VPN Process and Error Analysis, http://www.chicagotech.net/VPN%20process.htm
VPN Troubleshooting, http://www.chicagotech.net/vpn.htm
This posting is provided "AS IS" with no warranties.
"Scott Harding - MS MVP" <scrockel@**NO_SPAM**hotmail.com> wrote in message
news:(E-Mail Removed)...
> Did you join the domain first?
>
> --
> Scott Harding
> MCSE, MCSA, A+, Network+
> Microsoft MVP - Windows NT Server
>
> "Peter McCaul" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
>> I have installed a windows 2000 (server1) server and it's been working
> well
>> for the past 6 months. I have built another server (server2) offsite. I
>> have brought it to the office and I would like to add it to the active
>> directory of the first server. When I start the wizard, I get this
> message:
>>
>> The operation failed because: Failed to modify the necessary properties
> for
>> the machine account server2$ Access is denied.
>>
>> Any help is appreciated.
>>
>>
>
>