Monday, November 3, 2014

Logging in locally to Domain controller - Windows AD





After enabling my AD role in my Windows Server 2012 R2 and promoting it as a Domain Controller, I am no longer able to login locally onto the Windows Server itself.



Specifying my computername\Administrator or .\Administrator doesn't work.



Is it normal?



Answer



When you promote a server to a DC, it no longer uses the local account database. This database is only used when you boot your server in Directory Services Recovery Mode (DSRM), which makes the service inoperative as a DC while booted into this mode. This is the password you get to set when running dcpromo.



This is why your local account will not work - there is no local account any more.



Some more good info may be found in this forum thread on Technet.


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...