Hi Chris,
Thanks for your help. I have upgraded 3 other NT PDC to Windows 2000 AD
without any problem - each a child domain. Check Replication Monitor and
Directory Service event logs, no problem found. This member server I am
promoting - DNS is pointing to the first domain controller which host the
authoritative DNS for this child domain. DNS is AD integrated. SRV records
are ok.
The exact error message I get when dcpromo failed:
----------------
The operation failed because:
The Directory Service is missing critical information and cannot proceed. If
this is a replica, please rejoing the machine to the domain.
"Directory object not found"
---------------
Attached is the 3 event logs for duplicate administrator id being deleted.
Event Type: Error
Event Source: SAM
Event Category: None
Event ID: 12293
Date: 26-Jul-05
Time: 4:08:15 PM
User: S-1-5-21-1581056957-1160395716-709122288-500
Computer: HKBDC
Description:
There are two or more objects that have the same SID attribute in the SAM
datatbase. The Distinguished Name of the account is CN="Administrator~0
DEL:7692f749-d006-4c6f-bd6e-30d6a9b588e5",CN=Deleted
Objects,DC=hk,DC=aztech,DC=com. All duplicate accounts have been deleted.
Check the event log for additional Duplicates
Event Type: Error
Event Source: SAM
Event Category: None
Event ID: 12293
Date: 26-Jul-05
Time: 4:08:15 PM
User: S-1-5-21-1581056957-1160395716-709122288-500
Computer: HKBDC
Description:
There are two or more objects that have the same SID attribute in the SAM
datatbase. The Distinguished Name of the account is CN="$AccountNameConflict0
DEL:b1d0afad-a990-4692-b9cf-0d94fd1c6f09",CN=Deleted
Objects,DC=hk,DC=aztech,DC=com. All duplicate accounts have been deleted.
Check the event log for additional Duplicates
Event Type: Error
Event Source: SAM
Event Category: None
Event ID: 12293
Date: 26-Jul-05
Time: 4:08:15 PM
User: S-1-5-21-1581056957-1160395716-709122288-500
Computer: HKBDC
Description:
There are two or more objects that have the same SID attribute in the SAM
datatbase. The Distinguished Name of the account is CN="Azadmin
DEL:bebc0bc1-a7f5-45fc-b5b9-f3d5952dfe88",CN=Deleted
Objects,DC=hk,DC=aztech,DC=com. All duplicate accounts have been deleted.
Check the event log for additional Duplicates
Hope this is detail enough.
Post by Chris RutledgeHey David, quite an odd issue you have there. Can you be absolutely sure
that the Domain Administrator account with SID "S-1-5-< Unique domain
SID>-500" is missing? Or, possibly, did you mean some other administrator
account on the local machine? Might want to copy/paste the exact error
message you are seeing and any other relevant information you can think of.
Since this is the second DC you are bringing into the environment, I would
definately be sure of good DNS name resolution as a possibility. I assume
you installed DNS on the first DC, have your domain name forward lookup zone
AD-Integrated, and all the SRV records are there under the _msdcs portion of
the zone? And that the machine you are running DCPromo on has its DNS client
pointing to the first AD DC, and that one only. Sorry I couldn't give you a
better answer, but I just don't have enough information yet.
Thanks!
Chris Rutledge
Post by DavidTDone in-place upgrade on PDC without any problem. Setup another Windows 2000
member server, dcpromo it as nother domain controller but failed with
"Directory object not found". This is due to missing built-in administrator
account - event log show that it was deleted due to duplicate. Is there a way
to fix this missing account?
If not, can I roll-back to pre-AD NT PDC? To do this, will need to properly
demote AD (last domain controller) as already have 4 other domains in the
forest. How can I do this without losing accounts and folders access rights
across NT domains?
Another option is to setup another domain and use ADMT to migrate users but
not sure of the implication. This domain host our internal FTP, will FTP
access rights of other domain users be loss in the migration? How to migrate
Exchange 5.5 server?
Thanks for your advice.
DavidT