kyiu
asked on
Problem after NT domain migration to Window 2000
Help...I have "access deny error" when I try to install any Windows 2000 components, including DHCP, NTbackup device, and network protocols.
I updated my NT PDC to W2k server. Everything seems to be working, all users, group, and computer accounts migrated over (or seeming to be the case). All existing users have successfully login to the new server. The server the been running for over a week. Everything looks fine until I continue to migrate some of the other services that are still running in the old server. To my horror, I found out the LOCAL ADMINISTRATOR IN NEW SERVER HAVE NO PERMISSION TO INSTALL ANY SERVICE OR DEVICE.
What can I do to fix this? Did I missed some steps during the NT domain upgrade? I need to know ASAP if I have to roll-back the upgrade.
Thanks everyone
Ken
I updated my NT PDC to W2k server. Everything seems to be working, all users, group, and computer accounts migrated over (or seeming to be the case). All existing users have successfully login to the new server. The server the been running for over a week. Everything looks fine until I continue to migrate some of the other services that are still running in the old server. To my horror, I found out the LOCAL ADMINISTRATOR IN NEW SERVER HAVE NO PERMISSION TO INSTALL ANY SERVICE OR DEVICE.
What can I do to fix this? Did I missed some steps during the NT domain upgrade? I need to know ASAP if I have to roll-back the upgrade.
Thanks everyone
Ken
"To my horror, I found out the LOCAL ADMINISTRATOR IN NEW SERVER HAVE NO PERMISSION TO INSTALL ANY SERVICE OR DEVICE.
"
This is incorrect. Actually, there is no local administrator on a Windows 200 Domain Controller, only Domain accounts. A Domain Administrator can install services and componenets.
Have you installed Service Pack 2?
Can you post "The exact" error that you recieve when trying to install components and at what stage you get it at?
"
This is incorrect. Actually, there is no local administrator on a Windows 200 Domain Controller, only Domain accounts. A Domain Administrator can install services and componenets.
Have you installed Service Pack 2?
Can you post "The exact" error that you recieve when trying to install components and at what stage you get it at?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Re: Sysexpert
You ask: Are you running Pure AD or mixed mode ?
A: I'm running mixed mode
You ask: Have you checked all the event logs ?
A: Yes, I have. Nothing obvious, what should I be looking out for?
You ask: Are there other NT servers or BDC's available ?
A: The migration steps were:
Start with PDC (server1)
1. Create BDC (server2)
2. Promo server2 to PDC, (server1 became BDC)
3. Upgrade server2 to Windows2000
4. Upgrade server2 to 1ST domain controller
Server1 (BDC) is still in the network.
Re: Jmiller47
Sorry, I meant domain administrator (the big guy). Yes, I have applied SP2. In fact, I thought the SP2 may have caused the problem. I found number of KB articles in MS support site indicated SP2 protential problems. I'll try install DHCP server again in the morning. Then I'll post the exact message.
Re: Shekerra
Yes, I did installed terminal service (administration mode)
What's wrong with that? Can you explain in a little bit more details?
You ask: Are you running Pure AD or mixed mode ?
A: I'm running mixed mode
You ask: Have you checked all the event logs ?
A: Yes, I have. Nothing obvious, what should I be looking out for?
You ask: Are there other NT servers or BDC's available ?
A: The migration steps were:
Start with PDC (server1)
1. Create BDC (server2)
2. Promo server2 to PDC, (server1 became BDC)
3. Upgrade server2 to Windows2000
4. Upgrade server2 to 1ST domain controller
Server1 (BDC) is still in the network.
Re: Jmiller47
Sorry, I meant domain administrator (the big guy). Yes, I have applied SP2. In fact, I thought the SP2 may have caused the problem. I found number of KB articles in MS support site indicated SP2 protential problems. I'll try install DHCP server again in the morning. Then I'll post the exact message.
Re: Shekerra
Yes, I did installed terminal service (administration mode)
What's wrong with that? Can you explain in a little bit more details?
ASKER
I repeated DHCP server installation. Here's the error messeages:
ADD/Remove Hardware Wizard:
You do have sufficient security privileges to install or uninstall devices on this computer. Please contact your site administrator, or logoff and log on again as administrator and try again.
Optional Networking Components:
An error occurred which prevented the Dynamic Host Configuration Protocol (DHCP) component from being installed or removed. The error was 0x80070005.
There is no event log in the computer
Ken
ADD/Remove Hardware Wizard:
You do have sufficient security privileges to install or uninstall devices on this computer. Please contact your site administrator, or logoff and log on again as administrator and try again.
Optional Networking Components:
An error occurred which prevented the Dynamic Host Configuration Protocol (DHCP) component from being installed or removed. The error was 0x80070005.
There is no event log in the computer
Ken
ASKER
Hi guys,
I fixed it. The problem's solved. Thanks to Mr. Shekerra hint, I started to check the local policy for the administrators. I found the user-right to install devices and services was disabled for the administrator. The problem was inherited from the old server1 when I promoted the server2 to PDC. For some reason the old NT domain adminstrators had "the loading and unloading device" disabled. I changed the administrators rights on server2 and installed the DHCP server.
Thanks,
Ken
I fixed it. The problem's solved. Thanks to Mr. Shekerra hint, I started to check the local policy for the administrators. I found the user-right to install devices and services was disabled for the administrator. The problem was inherited from the old server1 when I promoted the server2 to PDC. For some reason the old NT domain adminstrators had "the loading and unloading device" disabled. I changed the administrators rights on server2 and installed the DHCP server.
Thanks,
Ken
ASKER
Hi guys,
I fixed it. The problem's solved. Thanks to Mr. Shekerra hint, I started to check the local policy for the administrators. I found the user-right to install devices and services was disabled for the administrator. The problem was inherited from the old server1 when I promoted the server2 to PDC. For some reason the old NT domain adminstrators had "the loading and unloading device" disabled. I changed the administrators rights on server2 and installed the DHCP server.
Thanks,
Ken
I fixed it. The problem's solved. Thanks to Mr. Shekerra hint, I started to check the local policy for the administrators. I found the user-right to install devices and services was disabled for the administrator. The problem was inherited from the old server1 when I promoted the server2 to PDC. For some reason the old NT domain adminstrators had "the loading and unloading device" disabled. I changed the administrators rights on server2 and installed the DHCP server.
Thanks,
Ken
Glad You got this resolved.
BTW
Shekerra is a female. ( Bev).
BTW
Shekerra is a female. ( Bev).
Good job, but make sure to check all the Administrator's right so somehting else doesn't fail in the future.
Have you checked all the event logs ?
Are there other NT servers or BDC's available ?
I hope this helps !