Cannot Add Windows NT 4.0 BDC to a Windows 2000 Domain

Article translations Article translations
Article ID: 242432 - View products that this article applies to.
This article was previously published under Q242432
This article has been archived. It is offered "as is" and will no longer be updated.
NOTE: After you install Windows NT Server, please apply Windows NT 4.0 Service Pack 4 or later.
Expand all | Collapse all


When you attempt to install a Windows NT 4.0-based backup domain controller (BDC) in a domain with a Windows 2000-based primary domain controller (PDC), you may receive the following error message:
The Machine Account for This Computer either does not exist or is inaccessible.
If an administrator attempts to add the computer account from an already installed Windows NT 4.0-based BDC using the Srvmgr tool, the following message occurs:
The Network Request is not supported.
The following error message is logged on the Windows 2000-based PDC:
Source: SAM
EVENT ID: 12298
DESCRIPTION:The Account "COMPUTER$" Cannot be converted to be a domain controller account as its object class attribute in the directory is not a computer or is not derived from computer. If this is caused by an attempt to install a pre Windows 2000 Domain, then you should recreate the account for the domain controller with the correct object class.


This behavior occurs because the Windows NT 4.0 Setup routine creates an account of class User instead of class Computer.


To add a Windows NT 4.0-based BDC to a domain with a Windows 2000 client as the PDC, use the Srvmgr tool that is included with Windows 2000. You should run this version of the tool only on the Windows 2000 client to pre-create the computer account for the BDC. After you create the account, the BDC installation should finish successfully.

NOTE: To start Windows 2000 Server Manager, click Start, click Run, type srvmgr, and then press ENTER.

For additional information about an alternate resolution, click the article number below to view the article in the Microsoft Knowledge Base:
221826 Creating Computer Object in Active Directory for Windows NT 4.0 BDC
You can use ADSI Edit to modify the userAccountControl property, and then use Nltest to reset the secure channel if the BDC is already installed.

ADSI Edit and NLTEST are a part of the Support Tools. You can install the Support Tools from Support\Tools folder on the Windows 2000 Server CD-ROM.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.


Article ID: 242432 - Last Review: February 28, 2014 - Revision: 1.2
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
  • Microsoft Windows NT Server 4.0 Standard Edition
  • Microsoft Windows NT 4.0 Service Pack 4
  • Microsoft Windows NT 4.0 Service Pack 5
  • Microsoft Windows NT 4.0 Service Pack 6
kbnosurvey kbarchive kberrmsg kbprb KB242432

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from