Click here to get back home

W2K3 Member Server unable to resolve domain SIDs

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
W2K3 Member Server unable to resolve domain SIDs Sir Andy 10-12-2006
Posted by Sir Andy on October 12, 2006, 11:56 am
Please log in for more thread options

I recently added a W2K3 Server to a Windows 2000 domain as a member
server.

The problem I am having is that the DOMAIN\Domain Admins group in the
Local Administrators group doesn't show up, but instead shows its SID.
One reason why I believe it is the SID for the Domain Admins group is
that when I try to add the Domain Admins group, I'll get a message
stating that the user already exists.

Now the problem W2K3 Server that we added to the domain is a Ghost
clone of another server that we manually built. The original server
that we manually built has no issues as of right now in AD. The Ghost
image was created before the original server was ever added to AD.
Before we added the problem server to the domain, we ran "newsid.exe"
from sysinternals.com to change the SID. Thinking that newsid.exe
didn't change the SID on the problem server, I used Ghost Walker (a SID
change from Symantec) to change the SID. Same problem.

Would anyone know what would cause this? Is there a utility that
definitely changes the SID on a W2K3 Server??


Posted by Osman SHENER on October 12, 2006, 4:34 pm
Please log in for more thread options
I recommend that you use Sysprep.

Osman Shener


>
> I recently added a W2K3 Server to a Windows 2000 domain as a member
> server.
>
> The problem I am having is that the DOMAIN\Domain Admins group in the
> Local Administrators group doesn't show up, but instead shows its SID.
> One reason why I believe it is the SID for the Domain Admins group is
> that when I try to add the Domain Admins group, I'll get a message
> stating that the user already exists.
>
> Now the problem W2K3 Server that we added to the domain is a Ghost
> clone of another server that we manually built. The original server
> that we manually built has no issues as of right now in AD. The Ghost
> image was created before the original server was ever added to AD.
> Before we added the problem server to the domain, we ran "newsid.exe"
> from sysinternals.com to change the SID. Thinking that newsid.exe
> didn't change the SID on the problem server, I used Ghost Walker (a SID
> change from Symantec) to change the SID. Same problem.
>
> Would anyone know what would cause this? Is there a utility that
> definitely changes the SID on a W2K3 Server??
>



Posted by Roger Abell [MVP] on October 13, 2006, 4:05 pm
Please log in for more thread options
See my response to your idential posting in the AD newsgroup.
i.e. is the Netbios Tcp/Ip Helper service running

In the future, when posting to multiple newsgroups is appropriate,
please consider cross-posting (i.e. naming multiple newsgroups
in a single posting) rather than making multiple separate posts.
XPosting keeps all responses together, visible to all in each group.

Thanks,
Roger

>
> I recently added a W2K3 Server to a Windows 2000 domain as a member
> server.
>
> The problem I am having is that the DOMAIN\Domain Admins group in the
> Local Administrators group doesn't show up, but instead shows its SID.
> One reason why I believe it is the SID for the Domain Admins group is
> that when I try to add the Domain Admins group, I'll get a message
> stating that the user already exists.
>
> Now the problem W2K3 Server that we added to the domain is a Ghost
> clone of another server that we manually built. The original server
> that we manually built has no issues as of right now in AD. The Ghost
> image was created before the original server was ever added to AD.
> Before we added the problem server to the domain, we ran "newsid.exe"
> from sysinternals.com to change the SID. Thinking that newsid.exe
> didn't change the SID on the problem server, I used Ghost Walker (a SID
> change from Symantec) to change the SID. Same problem.
>
> Would anyone know what would cause this? Is there a utility that
> definitely changes the SID on a W2K3 Server??
>



Similar ThreadsPosted
Unable to resolve SPNEGO Event ID 40961 errors November 25, 2007, 12:54 pm
Should our web server be a domain member? April 7, 2006, 2:44 pm
plz help to creating a windows server 2003 domain member user April 7, 2007, 3:08 am
Automatic certificate enrollment for local system failed after upgrading member server to domain controller August 25, 2005, 6:11 pm
W2K3 & VPN blocking access to server May 17, 2006, 9:10 pm
at job versus windows service on a w2k3 server February 22, 2006, 3:31 am
W2K3 Server File Deletion From Windows Service August 11, 2006, 4:20 pm
Group SIDs from SSPI token on Windows CE July 14, 2005, 5:39 pm
Bogus SIDs in User Rights Assignment list October 5, 2007, 1:11 pm
Issue cert to member of untrusted domain January 28, 2006, 9:31 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap