Microsoft KB Archive/923977
Article ID: 923977
Article Last Modified on 9/15/2006
- Microsoft Windows Server 2003, Standard Edition (32-bit x86)
- Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
- Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
You install Active Directory on a computer that is running Microsoft Windows Server 2003, or you remove Active Directory from a domain controller that is running Windows Server 2003. After you restart the computer, you notice that the following Warning event is logged in Event Viewer:
This issue occurs if Windows Server 2003 unsuccessfully tries to configure the Microsoft Distributed Transaction Coordinator (MS DTC) service to use the default security settings. You experience this issue if the Network Service account is the account that the MS DTC service uses. Security settings for the MS DTC service are stored in the following registry subkey:
The Network Service account has insufficient permissions to modify the security settings in the registry subkey.
You can safely ignore the event ID 53258 warning message that is mentioned in the "Symptoms" section. To prevent the warning message from being logged in Event Viewer, update the security component. To update the security component, follow these steps:
- Click Start, point to Control Panel, point to Administrative Tools, and then click Component Services.
- Expand Component Services, expand Computers, right-click My Computer, and then click Properties.
- Click the MSDTC tab, and then click Security Configuration.
- Under Security Settings, note the settings, and then click to select the Network DTC Access check box.
- Click Yes when you receive the following message:
- Click OK two times.
- Click Security Configuration, and then under Security Settings, specify the security settings that you had originally configured.
- Click OK.
Additional query words: w2k3 promote demote
Keywords: kbevent kbprb kbtshoot kbexpertiseinter kbexpertisebeginner KB923977