Solved

Can't logon as Domain Administrator after DCPROMO

Posted on 2008-10-25
5
1,979 Views
Last Modified: 2012-06-27
I have a Windows SBS 2003 machine running as the PDC. We are looking to eventually retire this machine, but for the time being, purchased a new server to join to the domain running Windows 2003 R2 Standard and have replication between the two systems. I successfully ran dcpromo on the new machine and rebooted. The new machine came up and I can see that DNS, AD, etc.. have replicated between the two machines; however, I am unable to login to the new Domain Controller as the domain administrator. I can login as another user in AD, but not the Admin account.

Any ideas?
0
Comment
Question by:vertigogroup
  • 2
5 Comments
 
LVL 4

Accepted Solution

by:
oks1977 earned 500 total points
ID: 22802762
Any error message when you tried to logon as a domain administrator.

When you login as a domain user, can you run dsa.msc and find domain admin and which are the users under it?
0
 

Author Comment

by:vertigogroup
ID: 22802779
Now that is strange, it works after two hours. The only modification I made was to AD when I investigated the Administrator account, I noticed that under the account tab, the User logon name and domain was blank, but it contained information for pre-Windows 2000. Anyhoo, that appears to have fixed it. I appreciate the prompt response.
0
 
LVL 4

Expert Comment

by:oks1977
ID: 22802797
Sure... :)
0
 

Expert Comment

by:DEMPC
ID: 32815605
i'm having this same problem.. promoted a brand new 2008 server and now can't login with ANY domain admin accounts.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now