UAC and windows 2008 server

[steph_]

hello

my client had migrated their AD to windows 2008

I must upgrade the UAC to 3.1R1 but i have now some probleme

When I test configuration, i have this message :

‚ You can not change the password of the IVE computer account on the active directory server using the specified administrator credentials.î

I use an administrator of the domain and i check the box "windows 2008 server" do you know how to solve my problem

thanks

[sumitbhat_]

Hi,

Was it working earlier ? The error indicates soem permissions issue. Can you tell whether you are using a full Admin account or some limited Admin account. You can also check the permissions of the user from AD.You can use the below steps to check the user permissions.

From the Active Directory Users and Computers snap-in, click Advanced Features on the View menu so that the Security tab is exposed when you click Properties.
Right-click the Computers container and then click Properties.
On the Security tab, click Advanced.
On the Permissions tab, click Add and add created user to the list of permission entries.
Make sure the "This object and all child objects" option is displayed in the Apply onto box.
From the Permissions box, click to select the Allow check box next to the "Create Computer Objects" and "Delete Computer Objects" and then click OK.

Use the above verified user in AD/NT configuration on IC. You can also take a policy trace to check the issue.

Let us know how it went.

Thanks

Sumit

[sumitbhat_]

Hi,

You can also check user access for Modify permissions on AD:

In the Access Control Settings for Computers dialog box, click Add.
In the Select User, Computer click or manually enter the name of the user to whom you want to grant permissions to perform AD operations on behalf of the IC.
In the Permission Entry for Computers dialog box, click Computer objects in the Apply onto list.
In the Permissions list, find the Reset Password permissions, click to select the Allow check box next to the permission, and then click OK.
In the Permissions list, find the ñModify Permissionsî permissions, click to select the Allow check box next to the permission, and then click OK.

[steph_]

my user is in the Administrator group

i've just asked my client checking my user's rights

thanks

I 'll reply again monday, when my client will answer me

Message Edited by steph on 09-04-2009 12:49 PM

[steph_]

hello

I tested with the domaine administrator and it didn't work

I have the same error message

[sumitbhat_]

Hi,

If you have used Domain Admin credentials and it has not worked, can you please confirm that your IC is on 3.1 as you have mentioned in original post ? Can you restart the IC services, try joining the domain again with the valid "Admin credentials". If it does not work, feel free to open a JTAC case.

Thanks

Sumit

[steph_]

my version is 3.1

I 've just restarted IC service and it didn't work

[sumitbhat_]

Can you paste the screenshot of the privilages of user by which you are trying to Add AD on IC and open a JTAC case.

[steph_ · Accepted solution]

hello

it was a time synchronisation pb

thanks sumit

by

[MichAda_]

: )

yeah...time sync just got me too...exact same problem.

Thanks for updating the post.