雖然這問題之前已經發問過, 但未能解決, 亦因一些原因 工作被延期置今
本人欲廢棄2台舊的Windows 2000 Server (下稱2000A 及 2000B)
所以需要將整個AD轉移至新的Windows 2003 Server R2 (下稱2003R2) 及 Windows 2008 Server R2(下稱2008R2)
本人已分別於2000A, 2000B上成功完成了
- adprep.exe /forestprep
- adprep.exe /domainprep
- adprep.exe /domainprep /gpprep
- adprep.exe /rodcprep
但在2003R2 及 2008R2 執行dcpromo時
都會出現以下2個錯誤:
The operation failed because:
A domain controller could not be contacted for the domain domain.edu.hk that contained an account for this computer. Make the computer a member of a workgroup then rejoin the domain before retrying the promotion.
"Access is denied."
The operation failed because:
The Active Directory Domain Services Installation Wizard was unable to convert the computer account (2003R2 / 2008R2 的server名)$ to an Active Directory Domain Controller account.
"Access is denied."
2003R2, 2008R2 已經加入domain
但角色都是Workstation or server, 並不能更變成Domain Controller
即使加了為Domain Controller成員組也不能
而且不能勾選Trush computer for delegation
請問, 究竟複製AD是需要一個怎麼的帳號, 或是需要一個有什麼權限的帳號?
本人暫時試過 Administrators, DNS Admins, Backup Admin, Domain Adminis, Enterprose Adminis, Scherma Admins
單一權限的, 有以上所列全部權限的 都試過了
感謝各位幫忙解答