Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a server running on windows server 2008. Recently we created a domain and added it to the domain. Also it is promoted as an additional domain controller on the network. A domain user account was created with same username and password as my previous local administrator account. Now I unable to login using my local account. I tried loggin in using SERVERNAME\Username, but it is giving incorrect password error message. Is there any way I can retrieve or create a new local administrator account on a domain computer

share|improve this question
Is the machine a Domain Controller? – Chris Wooton Jan 13 '11 at 16:43
Yes it is a domain controller on the network. – kishore Jan 13 '11 at 16:49
up vote 5 down vote accepted

Is the machine a Domain Controller? If so, you lose the ability to log in as a local account. You would have to demote the DC in order to log in as a local account.

share|improve this answer
Yes It is an additional domain controller on the network. – kishore Jan 13 '11 at 16:35

Domain Controllers do not have local accounts. They "become" the domain in many ways. If you need settings or files from the old profile, it should still be in the Users directory.

share|improve this answer

Login on the machine using a domain admin account. Go into the Computer Management snap-in (compmgmt.msc from the command line). Drill down to System Tools | Local Users and Groups | Users. In there you can create a new local admin account or reset the password for you existing account. If you create a new account, be sure to add them to the Administrators group.

share|improve this answer
Thanks @newmanth. I have logged in as domain administrator, but I don't see Local User and Group Users in system tools. All it shows are Task Scheduler, Event Viewer, Shared Folders, Reliability and Performance and Device manager. I have also checked their child nodes. – kishore Jan 13 '11 at 16:06
kishore: once it becomes a domain controller it gives up it local SAM database entirely, there are no local users and groups, you should use the tool active directory users and computers to manage access. – SpacemanSpiff Jan 13 '11 at 17:17
Thanks, Tom. You're absolutely right. I missed the part about the machine being dcpromo'd. – newmanth Jan 13 '11 at 19:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.