Не могу создать дополнительный контроллер домена .

[XYZ34 Профиль]

Доброе время суток !!!
Если у кого была похожая проблема откликнитесь
При создании второго контроллера домена на заключительном этапе комп выводит ошибку
The operation failed because: Failed to modify the necessary properties for the machine account TEMP$
"Access is denied. "
В доменные и в локальные параметры безопасности был добавлен пользователь админ, в следующие политики
1. разрешение доверия к учетным записям при делигировании
2. синхронизация данных службы каталогов
не помогло
Пробовал исключать машину из домена сбрасывать пароль, тщетно

[Harry33 Профиль СайтICQ]

XYZ34
Пользуйся поиском. В этом разделе неоднократно поднималась эта тема!

[XYZ34 Профиль]

Harry33
Я просмотрел не только этот раздел, по моему вопросу ничего нет

[Harry33 Профиль СайтICQ]

XYZ34
Извини, я промахнулся топиком....
dcdiag в студию

[XYZ34 Профиль]

Harry33
dcdiag отработал без нареканий
DC Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial non skippeable tests

Testing server: Default-First-Site-Name\INTSRV2
Starting test: Connectivity
......................... INTSRV2 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\INTSRV2
Starting test: Replications
......................... INTSRV2 passed test Replications
Starting test: NCSecDesc
......................... INTSRV2 passed test NCSecDesc
Starting test: NetLogons
......................... INTSRV2 passed test NetLogons
Starting test: Advertising
......................... INTSRV2 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... INTSRV2 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... INTSRV2 passed test RidManager
Starting test: MachineAccount
......................... INTSRV2 passed test MachineAccount
Starting test: Services
......................... INTSRV2 passed test Services
Starting test: ObjectsReplicated
......................... INTSRV2 passed test ObjectsReplicated
Starting test: frssysvol
......................... INTSRV2 passed test frssysvol
Starting test: kccevent
......................... INTSRV2 passed test kccevent
Starting test: systemlog
......................... INTSRV2 passed test systemlog

Running enterprise tests on : GVF
Starting test: Intersite
......................... GVF passed test Intersite
Starting test: FsmoCheck
......................... GVF passed test FsmoCheck

а вот netdiag ругается

Computer Name: INTSRV2
DNS Host Name: intsrv2.gvf
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 2 Stepping 4, GenuineIntel
List of installed hotfixes :
KB829558
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection 2

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : intsrv2
IP Address . . . . . . . . : 192.168.64.20
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.64.2
Primary WINS Server. . . . : 192.168.64.30
Secondary WINS Server. . . : 192.168.1.1
Dns Servers. . . . . . . . : 127.0.0.1
192.168.64.30


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{493B1444-4DAD-4C98-90F2-AFCF7740363B}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '127.0.0.1'.
[WARNING] The DNS entries for this DC are not registered correctly on DNS server '192.168.64.30'. Please wait for 30 minutes for DNS server replication.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{493B1444-4DAD-4C98-90F2-AFCF7740363B}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{493B1444-4DAD-4C98-90F2-AFCF7740363B}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped // больше всего меня эта строка вводит в недоумение

Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully

[domovoy]

[Defence Профиль]

Плюс ко всему

PASS - All the DNS entries for DC are registered on DNS server '127.0.0.1'.
[WARNING] The DNS entries for this DC are not registered correctly on DNS server '192.168.64.30'. Please wait for 30 minutes for DNS server replication.

Откуда первый DC узнает о втором DC. Если тот регится сам у себя. Зайди в DNS на 192.168.64.30 и посмотри какие там есть записи по INTSRV2.

[XYZ34 Профиль]

domovoy

Эта все с контроллера домена
192.168.64.20 - это DC на W2kAS
192.168.64.30 - аля - BDC на WinNT

Я и пытаюсь поднять дополнительный контроллер домена чтобы BDC потушить

Defence
попробую после обеда сделать, не могу юзверей выгнать чтобы сервер перегрузить

[domovoy]

[XYZ34 Профиль]

domovoy
сделал все как ты рекомендовал
на DC без вопросов а вот на будущем DC
netdiag пишет:

Computer Name: BUXSRV
DNS Host Name: BUXSRV.GVF
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 15 Model 2 Stepping 4, GenuineIntel
List of installed hotfixes :
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection 2

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : BUXSRV
IP Address . . . . . . . . : 192.168.64.25
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.64.2
Primary WINS Server. . . . : 192.168.64.30
Dns Servers. . . . . . . . : 192.168.64.20


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{6049A4F7-83D5-4438-95DB-572F093C9878}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
[WARNING] Cannot find a primary authoritative DNS server for the name
'BUXSRV.GVF.'. [RCODE_SERVER_FAILURE]
The name 'BUXSRV.GVF.' may not be registered in DNS.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{6049A4F7-83D5-4438-95DB-572F093C9878}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{6049A4F7-83D5-4438-95DB-572F093C9878}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'GVF' is to '\\COMPAQ'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.


The command completed successfully