Project Server 2007 and Active Directory.

[CougTek]

I have a small (irony) problem setting up Project Server 2007 to play with an Active Directory server.

Win2K3 Enterprise Server installed on an Athlon 64 X2 3800+ with 1GB RAM. That's my DNS server.

Win2K3 Enterprise Server installed on a Core 2 Duo E6400 with 2GB RAM. That's the application server on which I installed Project Server 2007.

IIS 6.0 and Frameworks .Net 3.0 are installed on the application server.

I'm logged as Administrator on the domain, from the application server. I then open IE and type http://localhost/pwa. I then access the default page of Office Project Web Access. I then go to the Server Settings and I'm sent to the administration page of Project Web Access. So far, so good. But then, when I try to access the Active Directory Resource Pool Synchronization within the Operational Policies, I end up with the folowing error message in the Active Directory Group:

• There was a problem accessing the Active Directory global catalog. Check that the following are true. 1. The Shared Services Provider (SSP) server can access an Active Directory domain controller hosting a copy of the global catalog. 2. The Windows account used for the SSP service credentials can read from the global catalog.

How can I make that error message disappear? Anyone here familiar with Project Server 2007 and Active Directory?

The Event Viewer from the Computer Management gives me two errors. The first one in the System section :

• The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  {61738644-F196-11D0-9953-00C04FD919C1}
  to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.

And the second one, from the Application section :

• Windows cannot determine the user or computer name. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted.

Apparently, that Network Service SID doesn't have a high enough level of permissions to do what I ask it to do. Where can I change that? I figure it's on the Active Directory server, but where? I'm already logged as the domain Administrator. Why am I not allowed to do whatever I want to on the application server is beyond my understanding.

If you don't understand a damn thing from the above, well console yourself knowing that we're at least two.

 

[ddrueding]

I assume that when you say DNS server above, it's really also a DC (the DC?)

I've found that sometimes I need to manually set the DC as the primary DNS on other servers for the AD to resolve correctly.

 

[CougTek]

Yes, it is also the Domain Controller. I'll try that, but I'm pretty sure that it's not the problem. Must be a right that's not enabled somewhere and I just don't figure it.