Cannot Add Windows NT 4.0 BDC to a Windows 2000 Domain

View products that this article applies to.

This article was previously published under Q242432

NOTE: After you install Windows NT Server, please apply Windows NT 4.0 Service Pack 4 or later.

Expand all | Collapse all

SYMPTOMS

When you attempt to install a Windows NT 4.0-based backup domain controller (BDC) in a domain with a Windows 2000-based primary domain controller (PDC), you may receive the following error message:

The Machine Account for This Computer either does not exist or is inaccessible.

If an administrator attempts to add the computer account from an already installed Windows NT 4.0-based BDC using the Srvmgr tool, the following message occurs:

The Network Request is not supported.

The following error message is logged on the Windows 2000-based PDC:

Source: SAM
EVENT ID: 12298
DESCRIPTION:The Account "COMPUTER$" Cannot be converted to be a domain controller account as its object class attribute in the directory is not a computer or is not derived from computer. If this is caused by an attempt to install a pre Windows 2000 Domain, then you should recreate the account for the domain controller with the correct object class.

Back to the top

CAUSE

This behavior occurs because the Windows NT 4.0 Setup routine creates an account of class User instead of class Computer.

Back to the top

RESOLUTION

To add a Windows NT 4.0-based BDC to a domain with a Windows 2000 client as the PDC, use the Srvmgr tool that is included with Windows 2000. You should run this version of the tool only on the Windows 2000 client to pre-create the computer account for the BDC. After you create the account, the BDC installation should finish successfully.

NOTE: To start Windows 2000 Server Manager, click Start, click Run, type srvmgr, and then press ENTER.

For additional information about an alternate resolution, click the article number below to view the article in the Microsoft Knowledge Base:

221826 (http://support.microsoft.com/kb/221826/EN-US/ ) Creating Computer Object in Active Directory for Windows NT 4.0 BDC

You can use ADSI Edit to modify the userAccountControl property, and then use Nltest to reset the secure channel if the BDC is already installed.

ADSI Edit and NLTEST are a part of the Support Tools. You can install the Support Tools from Support\Tools folder on the Windows 2000 Server CD-ROM.

Back to the top