We have two Server 2003 (Standard Edition, SP2) domain controllers -- call them S1 and S2 -- that have nearly identical setups: Both are DCs, DNS servers, DHCP controllers (with different scopes), WINS servers, and Global Catalogs.
Both servers pass all DCDIAG tests. Their DNS services show no unusual log errors and keep accurate host records. Their DHCP functions are working.
But server S2, in its Active Directory Users and Computers console, doesn't show any users; it shows only computers. It DOES show all organizational units, but no users (not builtin or custom) appear in those OUs.
I can create a NEW user in Server S2's ADUC -- and it replicates to server S1's ADUC -- but then the user disappears from server S2's ADUC. If I create a new user in the other DC -- server S1 -- it does NOT show up in server S2's ADUC.
In addition, if I go to Server S2's "Manage Your Server" interface and use the "Add or Remove a Role" wizard, there is no "Domain Controller (Active Directory)" in the list of current roles for the server.
I'm no expert, and I'm baffled. Thanks for any clues.