Domain admin can't add workstation to the domain ?!?!?!!!

From: Dennis Hartmann (dennis.hartmann@gsa.gov)
Date: 04/17/03 

From: "Dennis Hartmann" <dennis.hartmann@gsa.gov>
Date: Thu, 17 Apr 2003 08:58:05 -0700

Hi all,

I've ran into this problem before and could not figure out
why that is:

I started to consult this company with AD aldready in
place. I added myself to the Domain Admin's group and
wanted to start migrating the Workgroup PC's to the
domain. I also created the same account (my credentials)
on each workstation prior to migrating. I clicked"join
domain" and supplied my credentials to add the workstation
to the domain. It did not allow me to add this
workstation. I had to supply the original domain admin
credentials (account: Administrator, password: xxxxx) in
order to get the box migrated. It seemed to me that my
credentials were not enough for the domain controller
although I added myself to the domain admins group.

Weird or what? Does anybody have an explanation to this?
Thanks in advance

Relevant Pages

  • Re: Domain admin cant add workstation to the domain ?!?!?!!!
    ... I also created the same account (my credentials) ... > on each workstation prior to migrating. ... I had to supply the original domain admin ...
    (microsoft.public.win2000.security)
  • Re: cached login credentials
    ... large this residual risk is, because I can avoid it all together ... as it causes cached credentials to be stored as well. ... Remember that a "rainbow table attack" against a cached domain ... domain admin account credentials), is a credential cached anywhere for the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cached login credentials
    ... it takes longer to investigate an attack and clean up after it than ... in my network (egads! ... credentials, and uses runas to do priviledged operations (assume they ... domain admin account credentials), is a credential cached anywhere for ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cached login credentials
    ... Anything that does an interactive logon will store cached credentials, so yes, the GUI RunAs will do this. ... They're effective in pass-the-hash attacks, and this is why I've become an ardent fan of long simple passphrases rather than short complex passwords. ... domain admin account credentials), is a credential cached anywhere for the ... password cracking attacks from your list of worries, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Errors migrating from NT to 2003
    ... what 's the OS version on the Workstation? ... Best regards, ... Errors migrating from NT to 2003 ... domain groups to a local group on the WS: ...
    (microsoft.public.windows.server.migration)