I have a Win2000 domain, in a parent/child configuration. We're trying
to upgrade it to Win2003 this weekend. (Way overdue, I know) I have 4
DCs in the parent domain, 2 in the child. One of the parent DCs is
showing an error in DCDIAG.
Starting test: MachineAccount
* ADMNRDC001 is not a server trust account
* ADMNRDC001 is not trusted for account delegation
* SPN found :LDAP/admnrdc001.ads.pha.phila.gov/ads.pha.phila.gov
* SPN found :LDAP/admnrdc001.ads.pha.phila.gov
* SPN found :LDAP/ADMNRDC001
* SPN found :LDAP/admnrdc001.ads.pha.phila.gov/ADS
* SPN found
:LDAP/edcb95d8-2a02-4cd7-8fa7-3a92f9647144._msdcs.ads.pha.phila.gov
* SPN found
:E3514235-4B06-11D1-AB04-00C04FC2DCD2/edcb95d8-2a02-4cd7-8fa7-3a92f9647144/ads.pha.phila.gov
* SPN found :HOST/admnrdc001.ads.pha.phila.gov/ads.pha.phila.gov
* SPN found :HOST/admnrdc001.ads.pha.phila.gov
* SPN found :HOST/ADMNRDC001
* SPN found :HOST/admnrdc001.ads.pha.phila.gov/ADS
* SPN found :GC/admnrdc001.ads.pha.phila.gov/ads.pha.phila.gov
......................... ADMNRDC001 failed test MachineAccount
Starting test: Services
Searches have indicated verifying that the DC is marked with "Trust
computer for delegation" in AD U&C - and it is. Others indicate
verifying that the UserAccountControl is set properly, and the value
is the same for all 4 DCs in the parent domain. The server is shown as
a DC in AD U&C. This server is Schema, Domain and Infrastructure
Master for the parent domain.
Not sure where to go next. I'd really love to clear up all my DCDIAG
errors, so we can upgrade the domain this weekend. (we have new 2003
member servers all ready to go, just waiting to be DCPROMOed).
Thanks for any help.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
