Earlier today I tried logging on to one of our DC's, an old 2003 Server, and got an error that stated:
"The name or security ID (SID) of the domain specified is inconsistent with the trust information for that domain."
This is a physical machine (a lot of results on the internet talk about this being an issue on VM's), and as a DC does our Active Directory, DNS, DHCP and so on, so it's pretty important that we are able to access this machine. A lot of responses from searching suggest removing a machine from the domain and re-joining which would then hopefully get the correct domain SID , however as this is not a member machine isn't an option.
Using PSTools we initially found that the domain sid on this machine differed to our other DC, and believe the domain portion of the SID should match, so a colleague ran a 3rd party tool that copies the SID, so now the domain sid matches but the error persists.
All functions on the affected DC are still working, we can browse AD, DNS etc remotely (from the other DC) but can't log on to it directly, either remotely or at the console.
Any advice/help/suggestions welcome.