This weekend I was going to do a simple task... promo a server to take over as a secondary domain controller and uninstall the existing secondary domain controller.
Uninstall was uneventful,
However on the new server, I'm getting stuck on: Active Directory Domain Services could not configure the computer account $ to the remote Active Directory Domain Controller account
Most of my googling resulted in add BUILTIN\Administrators to the domain controller default GPO. However it was already there. I tried specifically adding my account and the computer... no difference. I tried temporarily linking the GPO policy to the servers and doing a GPupdate /force. No dice.
I even tried creating a local account and attempting the process. Same result.
At this point I'm selecting my second choice server and attempting moving ahead, because... ya know I gotta get it done today.
Domain functional level is windows 2016. Windows server standard 64 bit running on Hyper-V Hypervisor. Both VM's are Windows Server 2016.
I reset the DSRM password on the PDC because I couldn't find where the old one was recorded.
I'm now left scratching my head as to what could have been on the application server that would have prevented the promo.
The second server also failed. Active Directory Domain Services could not configure the computer account $ to the remote Active Directory Domain Controller account
What the heck am I missing?
I jumped to: Technet Error article However as far I can determine I have all the correct rights, and my GPResults is showing it as a winning policy.
However when I do a whoami /all it either doesn't show it, or shows it as disabled in the permissions section.
Firewalls are not in play.
This Server has no issues pinging the Domain controller and has been part of the domain for quite some time as an application server.
If you've already killed this dragon, or know of a different approach that may help me do it, it would be appreciated.
I spun up a blank WS 2016 std VM and was able to promo it to domain controller.
I'll likely just go ahead and start from a blank VM and add back in the items I need afterwards.
Unless anyone is able to assist, but you'd likely need a listing of all my GPO's and software and blah. I wonder if deactivating all my GPO's would solve the issue. I may try it, or I may just build on what I already know works.
Thanks for reading and showing interest my question.