Domain Admins group not added to local administrators group

sidwindows-server-2008-r2

On a new AD, I have joined a local computer (W2008 Server R2) to the domain.

After the reboot, I could not log with the domain administrator account to the machine.

Using the local admin, the "Domain Admins" group is not shown in the 'Administrators' group.

enter image description here

If I do try to add the domain admins group to the local administrators group, I get the error: "Domain Admins" is already a member of the group "Administrator".

enter image description here

The machines are VM template based.

Best Answer

Your error description suggests you did not run sysprep /generalize for your template to ensure that a new SID is being generated for each created VM instance.

As in this case you would have a number of domain members with identical local SIDs, it would lead to a number of identification oddities in AD - including the "Domain Admin not Local Admin" phenomenon.

Related Topic