PSComputerName : DC2-full
RunspaceId : ca62ff66-cc34-4ec8-8504-863c950c473a
Message : The operation failed because:
Failed to create a trust with domain child.contoso.com on the parent domain controller
"Access is denied."
This server has been disjoined from domain "CONTOSO".
Context : DCPromo.General.54
RebootRequired : False
Status : Error
Additionally, the server is removed from the parent domain, and no child domain is created.
- Rejoin the server to the parent domain to enable remote Windows PowerShell connectivity through the Invoke-Command cmdlet. (By default, this cmdlet requires the Kerberos protocol.)
- Try to create the domain again. When you do this, make sure that you provide the DNS Delegation credentials by using a valid username and password.
This issue occurs only when you provide a bad password through remote Windows PowerShell invocation. If the DNS delegation is run locally, the delegation will still fail but will provide a warning that delegation was not configured and will let promotion otherwise succeed.
Article ID: 2738060 - Last Review: Oct 2, 2012 - Revision: 1