After enabling my AD role in my Windows Server 2012 R2 and promoting it as a Domain Controller, I am no longer able to login locally onto the Windows Server itself.

Specifying my computername\Administrator or .\Administrator doesn't work.

Is it normal?


1 Answer 1


When you promote a server to a DC, it no longer uses the local account database. This database is only used when you boot your server in Directory Services Recovery Mode (DSRM), which makes the service inoperative as a DC while booted into this mode. This is the password you get to set when running dcpromo.

This is why your local account will not work - there is no local account any more.

Some more good info may be found in this forum thread on Technet.


Not the answer you're looking for? Browse other questions tagged or ask your own question.