2019 AD Server Migration - Issues Login in after the migration

Question

Hi Folks,

I have having trouble login in to 2019 server after promoting the DC. Incorrect username and password. Tried with other accounts and have the same issue.

4 Times I reinstalled but no luck.

Environment: 2 x 2008 DC's

                  2 x 2012 R2 DC's (recently promoted)

                  1 x 2019 DC - Cant login

Please help and I have wasted so much time on this.

PS: Replication works fine no errors (Repadmin /syncall).

DFSRMig - Eliminated state

Sorry for posting in the wrong place.

Answer 1

I'd suggest taking the 2019 offline, then do cleanup to remove remnants.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup
https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564

then rebuild it from scratch. Also check that each domain controller has own static ip address listed for DNS

Also check the dfs replication event logs on each for errors and clear up these problems.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2019, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to upvote and Accept as answer if the reply is helpful--