Event ID for creation of Windows 2008 R2 domain controller

Posted on 2012-08-27
Last Modified: 2012-08-28

Does anyone know what the Event ID number would be to confirm the successful promotion of a member server to a Domain Controller on a Windows 2008 R2 DC.

Question by:MACNoel
    LVL 6

    Assisted Solution

    by:Kiran Ch
    You should find the following event
    logged in your System log in the Event Viewer:

    Source: LsaSrv
    Type: Information
    Event ID: 29223
    This server is now a Domain Controller.

    You can also check the logs folder in %SystemRoot%\Debug.
    LVL 39

    Expert Comment

    by:Krzysztof Pytko
    As I remember there is no Event ID for successful server promotion to DC.


    Author Comment

    Hi chkiran248,
    Thanks for the information i can see the event as you described. Do you know is there a way to know which user id kicked off the dcpromo command. I am trying to find out who promoted the server.
    The event id 29223 only displays the user as System.
    LVL 57

    Expert Comment

    by:Mike Kline
    Around the same time you see the 29223 look for eventID  1074 (source = USER32)  See screenshot from my lab below.  It is logged for the reboot that is required after the box is promoted

    So here you can see it was the administrator account that did it

    One interesting thing is that the user that initiated dcpromo is not in dcpromo.log


    LVL 57

    Accepted Solution

    Just another note, if you check the dcpromo.log file in %systemroot%\debug you can also see the account that was used

    It should say [INFO] account domain\account, see screenshot below

    Note if this is the first DC in the forest it will not have an account name, it will say NULL...because there are no accounts yet.



    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
    This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now