If you receive an Access Denied message when attempting to promote a BDC, you may have a Windows NT 4.0 - Service Pack 4 (SP4) domain controller on the network.

In a network with domain controllers running SP4 and SP3 (or earlier), promotion can only be done from an SP4 domain controller.