10

I have a windows 2008 R2 standalone Domain Controller that I restored from backup. The original DC is offline.

When I log in with valid user credentials I get the error:

"The security database on the server does not have a computer account for this workstation trust relationship"

How can I log into the domain controller and fix whatever is broken? This is the only DC in the Forest.

For what it's worth, I'm hosting this server at Rackspace, so my physical options are limited.

makerofthings7
  • 8,911
  • 34
  • 121
  • 197
  • Can you log on with your local administrator account? Also, was this stand alone DC the same as the original DC? – ponsfonze Jul 27 '12 at 18:05
  • It is the same as the original DC. The original administrator account was renamed and disabled per security guidance. There is no local admin account (it's a DC) – makerofthings7 Jul 27 '12 at 18:06
  • You might have to use Active Directory Restore Mode to fix your OS, which may require a local logon. – ponsfonze Jul 27 '12 at 18:19
  • @ponsfonze There are no local accounts on Domain Controllers. – MDMarra Jul 27 '12 at 18:30
  • 2
    this is your real problem: "This is the only DC in the Forest." once you get through your current problem, fix this one. ALWAYS have at least 2 DC's. – longneck Jul 27 '12 at 18:53

2 Answers2

12

Active Directory Restore Mode is the only way, and it will require that you know the Directory Services Restore Mode administrator account password.

Incidentally, it looks like this problem was caused by improperly restoring a Domain Controller. Just doing a standard restore from backup will leave you with a non-functioning domain Controller every time. Next time, follow the technet guide here.

HopelessN00b
  • 53,795
  • 33
  • 135
  • 209
10

You can restart into Directory Service Restore Mode remotely and log in using the DSRM (local administrator) password.

If you do not know that password, you can reset it by booting your virtual machine from an ntpasswd image.

Skyhawk
  • 14,200
  • 4
  • 53
  • 95