Member server 2019 cannot add user account from Trusted domain

Question

Hi everybody,

we're in the middle of migration project to migrate all objects from Domain A to Domain B, right now we are trying to migrate "security translation".
and we're facing with issue when we trying to add administrator account from trusted domain B, to a member server in domain A, see the screenshot below

We're successfully managed to add the administrator account from Domain B to local administrator groups in all member server in Domain A, except one server

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having issues related to adding users to Group from Domain A to Domain B,

The error message "A member could not be added to or removed from the local group because the member does not exist" is generic Windows error. When I search online, I found that this error could occurs when there is duplicate SID in computer OS. I found ntdsUtil tool to find and clean up duplicate SID.

https://learn.microsoft.com/en-US/troubleshoot/windows-server/identity/ntdsutil-find-clean-duplicate-security-identifiers

--------------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

You are using a two-way trust correct?

Answer 3

Is it possible it could be duplicate SID's as suggest in the following article?

https://learn.microsoft.com/en-us/answers/questions/40034/ad-connect-setup-a-member-could-not-be-added-to-or.html