I was trying to setup a trust between two domains across ISA2004. Everything running in Virtual PC. But it did not work. Whenever I tried, I got the message The operation can not be performed on the current domain. I was not able to find this message anywhere on the Internet and the message gave no hint as to why it wasn't possible. Trying to explain the problem to my colleague, I realized the problem myself: I had copied the original Windows Server 2003 disk (file) in a workgroup state. DCPromo seems to reuse the SID of the original server for the domain, so the problem was caused by the fact that both Active Directory domains were having the same SID. Hmmm - I knew that I should not just copy the disk, but a decent error messages would have helped a lot. Demote, sysprep and promote removed the problem.
If you by chance should experience the same situation on NT4, the error is also a strange one. As I'm not 100% sure, I'm not going to provide the message but it had something to do with file/record already exists.
14 comments:
Yep! Finally an answer.
Spent all day on this. Didn't figure it was because of Virtual PC and SIDs!
Rather than sysprep, sysinternals offer a neater solution to change the SID -
http://www.sysinternals.com/Utilities/NewSid.html
Thank you for the information about the virtual PC & SID's. Demoted and used newsid. Worked a treat.
I cant hit myself hard enough for this stupid mistake :)
tnx....
Cool article. Thanks fo the answer to what has been bugging me all day.
just a note, you get the same issue using vmware fusion to copy Windows 2003 VMs
Thanks, obvious when you think about it, but sometimes its hard to see the wood for the trees.
Solved the same problem after cloning Windows server 2003 R2 on VMware server 1.0.4
Saved me some time!
Thanks! I could not Find any answer for that on MS site !
I spent past three days tring to get trust to work, searched MS and no luck, just had to search the right thing on Google to get to your post, I had done the same thing and cloned my servers, did as you said and worked perfect! Thanks for sharing your experience, saved me time and headache! :)
Also had the same problem!
Thanks for this article!
I cloned a VMware Windows Server 2008 because I wanted to save time. I did renamed the computer after the cloning and after that I run dcpromo. But the SID doesn't change when you rename a PC or run dcpromo.
Thanks for solving my problem. newsid works great!
Nice article. Helped me out a TON!
Thanks for this article!
Hyper-V, export and import VM, VM machine rename, dcpromo and then domain trust not working... but this post has helped
You are the man!!!!!
Thanks. This solves my problem.
Thanks God!!
Saved quite a bit of time, thanks!
Post a Comment