Solved

SBS 2003 migration to SBS 2011 - DCDIAG fails MachineAccount test

Posted on 2013-05-17

2 solutions

718 Views

Last Modified: 2016-11-23

Hi,

I have an old SBS2003 SP2 server, set as DC; in the process of upgrading to a new SBS2011 machine (running under XenServer on a Dell T620). In doing my prep work, I ran DCDIAG on the old server (named CORP01) and got the following:

 Starting test: MachineAccount
    * The current DC is not in the domain controller's OU
    ......................... CORP01 failed test MachineAccount

Open in new window

I checked, and yes, the top-level "Domain Controllers" list is empty. CORP01 shows up in /My Business/Computers/Production Servers, and is a member of the Domain Controllers group.
Microsoft has a hotfix that supposedly fixes this issue, but when I run the hotfix on the server it says that "the Service Pack version of this system is newer than the update you are applying. There is no need to install this update."

How can I resolve this issue? Any tips?

Comment

Question by:JessCat_606

[X]

Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

Help others & share knowledge
Earn cash & points
Learn & ask questions

Join The Community

6 Comments

LVL 22

Accepted Solution

by:Larry Struckmeyer MVP

Larry Struckmeyer MVP earned 250 total points

ID: 391770762013-05-18

SBS 2003 server should be in the Domain Controllers OU. Someone moved it or it is just misplaced. Any reason why you cannot move it to the DC OU? Right Click - Move or drag and drop.

LVL 20

Assisted Solution

by:compdigit44

compdigit44 earned 250 total points

ID: 391817672013-05-20

By default all DC's are placed in the Domain Controllers OU and process which the Default Domain Controllers GP is applied to. Microsoft DOES NOT support moving a DC out of the Default Domain Controller's OU. As fl_flyfishing has mentioned it sounds like someone moved the DC..

I would suggest moving the DC to the Default Domain Controller's OU then rebooting the DC...

Author Comment

by:JessCat_606

ID: 391821272013-05-20

Thanks fl_flyfishing, compdigit44, that's helpful. I'm just unsure, will moving the DC cause any issues with group policies or other stuff?

LVL 22

Expert Comment

by:Larry Struckmeyer MVP

ID: 391821532013-05-20

no issues.... just move it.

LVL 20

Expert Comment

by:compdigit44

ID: 391821802013-05-20

Agreed, move the DC then reboot just to be safe.. ;-)

Author Comment

by:JessCat_606

ID: 391832622013-05-20

Excellent, I moved it and rebooted; no issues. Thanks for the assist!

Featured Post

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Security Patches - To Patch or Not to Patch? - That is the question!

Article by: Andrew

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …

Remote Desktop Connection, “The server’s authentication policy does not allow connection requests using saved credentials. Please enter new credentials.”

Article by: Sal

Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.

Transferring Active Directory FSMO Roles to a Windows 2012 Domain Controller

Video by: Rodney

This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

Importing Users Into Active Directory From a Text File

Video by: Kevin

This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.