2

I have a server running on windows server 2008. Recently we created a domain and added it to the domain. Also it is promoted as an additional domain controller on the network. A domain user account was created with same username and password as my previous local administrator account. Now I unable to login using my local account. I tried loggin in using SERVERNAME\Username, but it is giving incorrect password error message. Is there any way I can retrieve or create a new local administrator account on a domain computer

Improve this question
2
  • 2
    Is the machine a Domain Controller?
    – Chris Wooton
    Jan 13, 2011 at 16:43
  • Yes it is a domain controller on the network.
    – kishore
    Jan 13, 2011 at 16:49

3 Answers 3

Reset to default
7

Is the machine a Domain Controller? If so, you lose the ability to log in as a local account. You would have to demote the DC in order to log in as a local account.

Improve this answer
1
  • Yes It is an additional domain controller on the network.
    – kishore
    Jan 13, 2011 at 16:35
5

Domain Controllers do not have local accounts. They "become" the domain in many ways. If you need settings or files from the old profile, it should still be in the Users directory.

Improve this answer
-1

Login on the machine using a domain admin account. Go into the Computer Management snap-in (compmgmt.msc from the command line). Drill down to System Tools | Local Users and Groups | Users. In there you can create a new local admin account or reset the password for you existing account. If you create a new account, be sure to add them to the Administrators group.

Improve this answer
3
  • Thanks @newmanth. I have logged in as domain administrator, but I don't see Local User and Group Users in system tools. All it shows are Task Scheduler, Event Viewer, Shared Folders, Reliability and Performance and Device manager. I have also checked their child nodes.
    – kishore
    Jan 13, 2011 at 16:06
  • 4
    kishore: once it becomes a domain controller it gives up it local SAM database entirely, there are no local users and groups, you should use the tool active directory users and computers to manage access.
    – SpacemanSpiff
    Jan 13, 2011 at 17:17
  • Thanks, Tom. You're absolutely right. I missed the part about the machine being dcpromo'd.
    – newmanth
    Jan 13, 2011 at 19:54

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .