Domain Account as Administrator on Windows 11

Question

Domain Account as Administrator on Windows 11

Johnny Sandaire 0

User's image

Why are the Domain Accounts not fully translated on Windows 11 PC? I joined the PC to the Domain and then added one of the Domain accounts to the PC as Administrator.
The Joining and Domain were found and joined correctly; however, the Login account does not look like it is fully working on the Windows 11 PC. How do I fix this issue?

4 answers

Your answer

Answer 1

Thameur-BOURBITA 36,266 Moderator

Hi @Johnny Sandaire

The SID in the screenshot seems to be for account of another domain or Entra ID. It can be also account for a deleted object. Try follow this link to identify the user: https://oliverkieselbach.com/2020/05/13/powershell-helpers-to-convert-azure-ad-object-ids-and-sids/

Please don't forget to accept helpful answer

Johnny Sandaire 0 Reputation points

2024-01-16T23:46:54.3866667+00:00

The SID that is displayed is the Domain Admins Group, where the highlighted account is a member. How do I convert the SID to the actual name is it is displayed in the DC, instead of an object number?
Thameur-BOURBITA 36,266 Reputation points Moderator

2024-01-17T13:52:11.71+00:00

@Johnny Sandaire did you try to disjoin then rejoin the machine to the domain domain ?

Please don't forget to accept helpful answer
Johnny Sandaire 0 Reputation points

2024-01-17T14:22:14.3233333+00:00

Disjoin and rejoin is the first step I took. Even though the disjoin and rejoin went smoothly, the translation is strangely not getting done. The SID remains in place. Back in the early of Windows NT, whenever this happened, it was a sign that the Domain Join account was not working and communicating with the Server and Cached credentials were being used to login. But this time, I cleared the DNS, Disjoined and rejoined with a successful Domain authentication of the Domain credentials did not fix it. I am wondering if there is anything else I can do to get it resolved.
Johnny Sandaire 0 Reputation points

2024-01-17T14:24:21.24+00:00

I wish I had more test to perform or solutions to try.
Thameur-BOURBITA 36,266 Reputation points Moderator

2024-01-17T14:39:17.8066667+00:00

@Johnny Sandaire

Are you sure that the PC can contact a domain controller to translate the SID.

I made a test on my computer , When it's connected I see the group name and when I disconnect it from network to prevent it to contact domain controlller it displays SID.

Please don't forget to accept helpful answer
Johnny Sandaire 0 Reputation points

2024-01-18T18:31:41.2+00:00

Yes,
As depicted below, I can ping the DC in all required methods.
Thameur-BOURBITA 36,266 Reputation points Moderator

2024-01-18T19:29:56.29+00:00

@Johnny Sandaire

You should check if required port between client and domain controller are already opened. You can use PortQryUI tools: https://www.microsoft.com/en-us/download/details.aspx?id=24009

Please don't forget to accept helpful answer
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 2

Anonymous

Hello Johnny Sandaire, Thank you for posting in Q&A forum. What accounts did you add on this win client? You can try to find the accounts in AD and check if you can find them.

User's image

In Windows 11, some user interface elements may not have been fully translated to other language versions, which may be the reason for the inconsistent interface you see. It is also possible that there is a local cache issue. Try restarting your computer to clean up the DNS cache and old credentials in Windows Credential Manager. In addition, is the client with the problem displaying your name working properly? You can try to operate or work on the client with the error display to determine if there are any other issues with the client. I hope the information above is helpful. If you have any questions or concerns, please feel free to let us know. Best Regards, Daisy Zhou

If the Answer is helpful, please click "Accept Answer" and upvote it.

Johnny Sandaire 0 Reputation points

2024-01-17T12:15:48.3533333+00:00

I cleared the DNS Cache a few times and checked the DNS Cache display to make sure it was cleared. I rebooted. The Domain Admins Group from the DC that I added is still not translated and the SID is what I am seeing instead of the actual name of the Group.
Thameur-BOURBITA 36,266 Reputation points Moderator

2024-01-19T19:07:58.4533333+00:00

@Johnny Sandaire • The network flow and DNS seems ok. I think that the problem is on Operating system. If you have this behavior only on this machine , you should rebuilt it with official version. Don't worry if the translation is not working , because a domain object is known by its SID in the operating system.

Please don't forget to accept helpful answer

Answer 3

Marius Ene 345

Looks kind of a DNS issue. Do you have multiple network cards? Can you confirm that the primary DNS server used by the client is the right Domain controller? Is is isolated to only one Windows 11 client or any other Windows 11 client? That should point you in the right direction, if its a server side vs a client side issue.

Johnny Sandaire 0 Reputation points

2024-01-19T15:12:12.27+00:00

I installed a new Server and was able to join the DC and it all seems correct, as indicated below. The local Admin Group contains the translated account and group as it should be. Maybe it is my Windows 11 build. I forgot to mention that the Windows 11 version is part of the Windows Insider and there may be something that is happening on that side of the spectrum as well.

Answer 4

Marius Ene 345

So that was your problem you were running a Preview Build of Windows 11. You need to download an official supported version and try. https://www.microsoft.com/software-download/windows11

Share via

Domain Account as Administrator on Windows 11

4 answers

Your answer