Registrations are now open. Join us today!
There is still a lot of work to do on the wiki yet! More information about editing can be found here.
Already have an account?

Microsoft KB Archive/923977

From BetaArchive Wiki
Knowledge Base

Event ID 53258 is logged in Event Viewer after you install or remove Active Directory in Windows Server 2003

Article ID: 923977

Article Last Modified on 9/15/2006


  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)


You install Active Directory on a computer that is running Microsoft Windows Server 2003, or you remove Active Directory from a domain controller that is running Windows Server 2003. After you restart the computer, you notice that the following Warning event is logged in Event Viewer:

Type: Warning
Source: MSDTC
Event ID: 53258
MS DTC could not correctly process a DC Promotion/Demotion event. MS DTC will continue to function and will use the existing security settings.
Error Specifics : xxxxxxxxxxxxxxxxxxxxx\uiname.cpp:xxxx, CmdLine: xxxxxxxxxx\msdtc.exe, Pid: xxxx


This issue occurs if Windows Server 2003 unsuccessfully tries to configure the Microsoft Distributed Transaction Coordinator (MS DTC) service to use the default security settings. You experience this issue if the Network Service account is the account that the MS DTC service uses. Security settings for the MS DTC service are stored in the following registry subkey:


The Network Service account has insufficient permissions to modify the security settings in the registry subkey.


You can safely ignore the event ID 53258 warning message that is mentioned in the "Symptoms" section. To prevent the warning message from being logged in Event Viewer, update the security component. To update the security component, follow these steps:

  1. Click Start, point to Control Panel, point to Administrative Tools, and then click Component Services.
  2. Expand Component Services, expand Computers, right-click My Computer, and then click Properties.
  3. Click the MSDTC tab, and then click Security Configuration.
  4. Under Security Settings, note the settings, and then click to select the Network DTC Access check box.
  5. Click Yes when you receive the following message:

    MS DTC service will be stopped and restarted. All dependent services will be stopped. Please press yes to proceed.

  6. Click OK two times.
  7. Click Security Configuration, and then under Security Settings, specify the security settings that you had originally configured.
  8. Click OK.

Additional query words: w2k3 promote demote

Keywords: kbevent kbprb kbtshoot kbexpertiseinter kbexpertisebeginner KB923977