After enabling my AD role in my Windows Server 2012 R2 and promoting it as a Domain Controller, I am no longer able to login locally onto the Windows Server itself.

Specifying my computername\Administrator or .\Administrator doesn't work.

Is it normal?


1 Answer 1


When you promote a server to a DC, it no longer uses the local account database. This database is only used when you boot your server in Directory Services Recovery Mode (DSRM), which makes the service inoperative as a DC while booted into this mode. This is the password you get to set when running dcpromo.

This is why your local account will not work - there is no local account any more.

Some more good info may be found in this forum thread on Technet.


Not the answer you're looking for? Browse other questions tagged .