[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2425
  • Last Modified:

Event ID for creation of Windows 2008 R2 domain controller

Hi,

Does anyone know what the Event ID number would be to confirm the successful promotion of a member server to a Domain Controller on a Windows 2008 R2 DC.

Thanks!
0
MACNoel
Asked:
MACNoel
2 Solutions
 
Kiran ChCommented:
You should find the following event
logged in your System log in the Event Viewer:

Source: LsaSrv
Type: Information
Event ID: 29223
Description:
This server is now a Domain Controller.

=========
You can also check the logs folder in %SystemRoot%\Debug.
0
 
Krzysztof PytkoActive Directory EngineerCommented:
As I remember there is no Event ID for successful server promotion to DC.

Regards,
Krzysztof
0
 
MACNoelAuthor Commented:
Hi chkiran248,
Thanks for the information i can see the event as you described. Do you know is there a way to know which user id kicked off the dcpromo command. I am trying to find out who promoted the server.
The event id 29223 only displays the user as System.
Thanks!
0
 
Mike KlineCommented:
Around the same time you see the 29223 look for eventID  1074 (source = USER32)  See screenshot from my lab below.  It is logged for the reboot that is required after the box is promoted

So here you can see it was the administrator account that did it

1
One interesting thing is that the user that initiated dcpromo is not in dcpromo.log

Thanks

Mike
0
 
Mike KlineCommented:
Just another note, if you check the dcpromo.log file in %systemroot%\debug you can also see the account that was used

It should say [INFO] account domain\account, see screenshot below

dcpromo.log
Note if this is the first DC in the forest it will not have an account name, it will say NULL...because there are no accounts yet.

Thanks

Mike
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now