Security ID of the domain specified in inconsistent with the trust information for that domain

Hi,

Earlier today I tried logging on to one of our DC's, an old 2003 Server, and got an error that stated:

"The name or security ID (SID) of the domain specified is inconsistent with the trust information for that domain."

This is a physical machine (a lot of results on the internet talk about this being an issue on VM's), and as a DC does our Active Directory, DNS, DHCP and so on, so it's pretty important that we are able to access this machine. A lot of responses from searching suggest removing a machine from the domain and re-joining which would then hopefully get the correct domain SID , however as this is not a member machine isn't an option.

Using PSTools we initially found that the domain sid on this machine differed to our other DC, and believe the domain portion of the SID should match, so a colleague ran a 3rd party tool that copies the SID, so now the domain sid matches but the error persists.

All functions on the affected DC are still working, we can browse AD, DNS etc remotely (from the other DC) but can't log on to it directly, either remotely or at the console.

Any advice/help/suggestions welcome.

Gavin
mcsglobalAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Randy DownsOWNERCommented:
End of Life for Server 2003 is fast approaching so it would be wise to transfer roles to a newer Server O/S. Once you transfer roles maybe you can remove & re-add back to the domain.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.