Microsoft KB Archive/242432

= Cannot Add Windows NT 4.0 BDC to a Windows 2000 Domain =

Article ID: 242432

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server
 * Microsoft Windows NT Server 4.0 Standard Edition
 * Microsoft Windows NT 4.0 Service Pack 4
 * Microsoft Windows NT 4.0 Service Pack 5
 * Microsoft Windows NT 4.0 Service Pack 6

-



This article was previously published under Q242432



NOTE: After you install Windows NT Server, please apply Windows NT 4.0 Service Pack 4 or later.



SYMPTOMS
When you attempt to install a Windows NT 4.0-based backup domain controller (BDC) in a domain with a Windows 2000-based primary domain controller (PDC), you may receive the following error message:

The Machine Account for This Computer either does not exist or is inaccessible.

If an administrator attempts to add the computer account from an already installed Windows NT 4.0-based BDC using the Srvmgr tool, the following message occurs:

The Network Request is not supported.

The following error message is logged on the Windows 2000-based PDC:

Source: SAM

EVENT ID: 12298

DESCRIPTION:The Account "COMPUTER$" Cannot be converted to be a domain controller account as its object class attribute in the directory is not a computer or is not derived from computer. If this is caused by an attempt to install a pre Windows 2000 Domain, then you should recreate the account for the domain controller with the correct object class.



CAUSE
This behavior occurs because the Windows NT 4.0 Setup routine creates an account of class User instead of class Computer.



RESOLUTION
To add a Windows NT 4.0-based BDC to a domain with a Windows 2000 client as the PDC, use the Srvmgr tool that is included with Windows 2000. You should run this version of the tool only on the Windows 2000 client to pre-create the computer account for the BDC. After you create the account, the BDC installation should finish successfully.

NOTE: To start Windows 2000 Server Manager, click Start, click Run, type srvmgr, and then press ENTER.

For additional information about an alternate resolution, click the article number below to view the article in the Microsoft Knowledge Base:

221826 Creating Computer Object in Active Directory for Windows NT 4.0 BDC

You can use ADSI Edit to modify the userAccountControl property, and then use Nltest to reset the secure channel if the BDC is already installed.

ADSI Edit and NLTEST are a part of the Support Tools. You can install the Support Tools from Support\Tools folder on the Windows 2000 Server CD-ROM.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Additional query words: how create

Keywords: kberrmsg kbprb KB242432

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.