Your Windows 2000 member workstation or server may have the following System event log entries:
Error Message: Attempt to update Host Service Principal Names (SPNs) of the computer object in Active Directory failed.
The updated values were UNAVAILABLE and UNAVAILBLE. The following error occurred:
Access is denied.
Event ID: 5789
Error Message: Attempt to update DNS host name of the computer object in Active Directory failed.
The updated value was fully qualified computername. The following error occurred:
Access is denied. </b>
Use the Active Directory Users and Computers snap-in to verify / change permissions in the Access this computer from the network user right for the Default domain controllers Group Policy Object (GPO) in the Domain Controllers organizational unit. Select Domain Controllers and right-click Properties. Select the Group Policy tab. Open each of the following items in the snap-in:
Default Domain Controllers Policy
User Rights Assignment
Add Authenticated Users if this group is not present.
Make sure that the computer object has read, write, create, delete child objects, and change passwords permissions.