Results 1 to 5 of 5

Thread: Event ID 1168 NTDS General

  1. #1
    Join Date
    Aug 2006
    Posts
    332

    Event ID 1168 NTDS General

    If I am trying to promote a Windows 2003 Server into a Native AD with 2000 and 2003 DC's in it, the DCPROMO procedure stops half way through trying to copy the configuration folder of AD. The error that I am getting is "The operation failed because: The AD installation Wizard was unable to convert the computer account <name> to a domain account. "Access is denied". After that 1168 even is displayed in the event log. I have searched the internet but nothing seems to be helping me? Can anyone please help. Thanks.

  2. #2
    Join Date
    Nov 2005
    Posts
    631

    RE: Event ID 1168 NTDS General

    The problem that you are facing can occur if the account that is used for the promotion operation has not been assigned the "Delegation Privilege" right. Or, if this right has been assigned, the policy has not propagated yet, possibly because of replication latency. By default, only members in the Administrators group have the "Delegation Privilege" right. Follow the complete steps given here - http://support.microsoft.com/kb/232070/en-us

  3. #3
    Join Date
    May 2006
    Posts
    91

    Re: Event ID 1168 NTDS General

    Check the article made on "Event 1168: Windows 2000 DCs Unable to Boot into Active Directory" over here - http://support.microsoft.com/?id=265089

  4. #4
    Join Date
    May 2009
    Posts
    1,084

    Re: Event ID 1168 NTDS General

    The error message that you are getting might be happening because the user account that is used to execure DCPROMO might not been granted the “Enable computer and user accounts to be trusted for delegation” user right. So to solve this issue check the article on "DCPROMO fails with error "Access is denied" if the user performing the promotion is not granted the "trusted for delegation" user right" by following this link - http://support.microsoft.com/kb/2002413

  5. #5
    Join Date
    Nov 2009
    Posts
    857

    Re: Event ID 1168 NTDS General

    It looks to me that there might be a name conflict in the Domain Controllers OU. So you can try to use an account with Enterprise Admin rights and test. If you are asked for any password then try to ensure using domain\username to make sure that the credentials are proper. You need to also ensure that your new DC is pointing to an existing DC for primary DNS before promoting.

Similar Threads

  1. New DC problem with event log NTDS Replication error 1864
    By Elettra in forum Active Directory
    Replies: 4
    Last Post: 21-01-2010, 02:34 PM
  2. Warning NTDS ISAM Event ID 507 and Event id 508
    By Tahseen Shahzad in forum Active Directory
    Replies: 7
    Last Post: 27-04-2009, 12:28 AM
  3. NTDS Rplication Event 1864
    By Ain'tSoBad in forum Active Directory
    Replies: 6
    Last Post: 26-11-2007, 12:23 PM
  4. NTDS Replication, Event ID: 1864
    By Edwin Delgado in forum Windows Server Help
    Replies: 0
    Last Post: 04-12-2005, 07:34 AM
  5. event ID: 1083 and 1955 ntds replication
    By pain112 in forum Active Directory
    Replies: 8
    Last Post: 16-09-2005, 02:44 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,675,405,836.14743 seconds with 18 queries