Service Control Point Error When Attempting to Add a RIS Server to the Domain (238990)



The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server

This article was previously published under Q238990

SYMPTOMS

When a user adds a Remote Installation Service (RIS) server to the network using Risetup.exe, the following error message may be displayed:
Service Control Point Error

An error occurred during creation of the service control point object in the directory service. Make sure you have the proper permissions within the directory service and then rerun setup to correct the problem.

CAUSE

This behavior occurs because the user does not have appropriate rights to create Intellimirror objects on the computer's Machine Account Object (MAO) in Active Directory.

RESOLUTION

To resolve this issue:
  1. Log on as Administrator of the domain and start the Active Directory Users and Computers snap-in.
  2. On the View menu, click Advanced features.
  3. Locate the organizational unit (OU) that contains the MAO for the RIS server.
  4. Right-click the OU, and then click Properties.
  5. On the Security tab, click the appropriate user/group (if the user/group is not displayed, click Add to add the user/group).NOTE: On this page, you can grant the user/group Full Control permissions, which allows the user/group to complete the task. If you choose to do this, proceed to step 13 in this article. If you only want to give the user/group permissions to add the RIS server, please continue on with the next step.

  6. Click Advanced.
  7. When the Access Control Settings for OU_NAME dialog box is displayed (where OU_NAME is the name of your OU), click Add, and then click the user/group to which you want to grant permissions.
  8. When the Permission Entry for OU_NAME dialog box is displayed, add the following:
       Apply to:  This object and All Child Objects
       Permissions to allow:  List Contents
                              Read All Properties
                              Read Permissions
                              Create Intellimirror Service Objects
                              Delete Intellimirror Service Objects
    					
  9. Click OK.
  10. When the Access Control Settings for OU_NAME dialog box is displayed, click Add, and then click the same user/group you selected in the previous steps.
  11. When the Permission Entry for OU_NAME dialog box is displayed, add the following:
       Apply to: Intellimirror Service objects
       Permissions to allow: Full Control
    					
  12. Click OK.
  13. To complete Setup, the user must run the following command on the RIS server:

    risetup.exe -check

Granting the user/group Full Control permissions and applying the This object and all child Objects setting on the OU usually resolves this issue, but you may want to restrict the user/group permissions. For example, if all RIS servers in your organization are in the same OU, it may be easier to grant Full control permission to the user/group that administers or installs these servers. However, if the servers are spread out across your organization, you may want to restrict the permissions.

Modification Type:MajorLast Reviewed:11/13/2003
Keywords:kbenv kbprb KB238990