We recently added a Win2000 server into our stable of 8 other NT4 servers (all into the same domain). We successfully synchronized our current domain users with the new 2000 server, which, of course, has become the primary PDC. However, we cannot add any new domain users. We have tried adding them through the active server pages on the Win2000 PDC as well as via the user manager program from all the WinNT4 servers. The user names propagate out to all the user manager tables when added from each server, including showing up in the active server pages when added from an NT4 user manager screen, but when we try to logon to the domain using the new logon, we get "username not found." We can change passwords successfully on the older accts, etc, but cannot add new users. We had no problems adding users prior to adding the Win2000 server. We have researched this extensively but cannot find any info on it. Any help would be appreciated!!
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Cannot add new users to domain
- Thread starter Olliecat
- Start date
HI.
Seems like you made a big mistake -
how did you add the W2K domain controller to the existing domain?
If you run DCPROMO and create a domain with the same name as the NT4 domain, this is wrong, since the domain controllers are not using the same SID and therefor are not realy in the same domain.
If this is what happened, you'll see some NETLOGON errors in Event Viewer of NT4 DCs.
There are several ways to do it the right way, but first, you'll have to run DCPROMO on the W2K server to uninstall AD, and let the NT4 servers take over again.
1) Add the W2K as a member server - this seems like the best for you, since you have other Domain Controllers.
2) Upgrade the NT4 PDC (or any BDC that will first be promoted to PDC) to W2K, then add the new W2K as another DC or member server.
3) Install NT4 BDC on the new server, promoted it to PDC, upgrade it to W2K.
It is a very good idea to take some more time studying W2K and AD before implementing in production. The time spent on this will save you much more time later.
Please correct me if I'm wrong.
Bye Yizhar Hurwitz
Seems like you made a big mistake -
how did you add the W2K domain controller to the existing domain?
If you run DCPROMO and create a domain with the same name as the NT4 domain, this is wrong, since the domain controllers are not using the same SID and therefor are not realy in the same domain.
If this is what happened, you'll see some NETLOGON errors in Event Viewer of NT4 DCs.
There are several ways to do it the right way, but first, you'll have to run DCPROMO on the W2K server to uninstall AD, and let the NT4 servers take over again.
1) Add the W2K as a member server - this seems like the best for you, since you have other Domain Controllers.
2) Upgrade the NT4 PDC (or any BDC that will first be promoted to PDC) to W2K, then add the new W2K as another DC or member server.
3) Install NT4 BDC on the new server, promoted it to PDC, upgrade it to W2K.
It is a very good idea to take some more time studying W2K and AD before implementing in production. The time spent on this will save you much more time later.
Please correct me if I'm wrong.
Bye Yizhar Hurwitz
- Thread starter
- #3
- Status
Similar threads
