The security database on the server does not have a computer account f

[mtayloratppld]

I built a new Windows 2008 server (domain controller) a couple of weeks ago and everything seemed to go okay. Today I went to reboot it and when I try and login I get this error:

"The security database on the server does not have a computer account for this workstation"

Since it's a DC I can't log on locally, what can I do to fix this?? Help!

 

[IllogicallyLogical]

I am assuming this is not the only DC on the domain. Log into another DC or your client machine and launch "ADSI Edit." To start "ADSI Edit," go to Start> Run> type adsiedit.msc. When the mmc opens up, expand domain structure. Find and expand the entry for "OU=Domain Controllers" and you should see entries for all the DCs in your domain. Right-click the entry for the problematic Windows 2008 Server DC and select 'Properties' from the context menu. Under the 'Attribute Editor' tab scroll down through the list of attributes until you find servicePrincipalName. Click the 'Edit' button to open the 'Multi-valued String Editor' dialog box. Look through the list of values (there will probably be several in the list) and make sure that you have at least these two entries listed:

HOST/<servername>
HOST/<servername.domainname.com>

If either of these values are missing, add the entry to the list replacing the generic values I have input above with your correct server and domain name entries. Select 'OK' to save the values and then go and reboot the 2008 Server and try to log in once again.

If you do not have "ADSI Edit" installed, it is available in Windows Server 2003 and Windows XP by installing the Support Tools from the Windows Server 2003 product CD. It is available in Windows Vista by installing RSAT and in Windows Server 2008 by installing RSAT or adding Active Directory Domain Services.

Joey
CCNA, MCSA 2003, MCP, A+, Network+, Wireless#

 

[mtayloratppld]

This is what I have listed:

HOST/servername
HOST/servername.ad.domain.com
HOST/servername.ad.domain.com/ad.domain.com
HOST/servername.ad.domain.com/domain

Should I keep all of those? Or remove one? I also have others that begin with LDAP, DNS, exchange, etc.

 

[mtayloratppld]

I also recently installed a MSSQL database on here which I've heard can cause similar problems. There was also a entry in the list that began with MSSQL which I removed but it didn't seem to help.