The name or security ID (SID) of the domain specified is inconsistent with the trust information for that domain

May 1, 2005 · 1 min read

I've been working on a project that required a domain controller and application server to test the application.

I used VPC 2004 to build 2 Windows 2003 Servers for this. I initially created 1 VPC and performed the upgrades / patches, etc. Then I'd copy this file, renaming it and placing it in a different folder for the virtual hard disk, etc.

When I promoted my DC and joined it with the application server, all went well - until I tried to logon to the DC. I received the above mentioned error.

Because I created only ONE Windows 2003 Server, the SID is the same on both of my virtual machines because I simply copied the virtual hard drive and renamed it. If you have MSDN and you're wanting to save time - why install Windows 2003 more than once, right? Well, wrong.

Fortunately I haven't been the only one to see this. You can download NewSID from SysInternals (http://www.sysinternals.com/Utilities/NewSid.html) and it will change the SID on the server you are wanting to connect to the DC with. They even include the source code - for educational purposes.

NOTICE: Before running the NewSID application, MAKE SURE YOU ARE NOT JOINED TO THE DC - otherwise, you'll have to muddle through logging on locally, disconnecting, and rejoining the DC. When the SID is changed, and if you are connected, the new SID generated has NO permissions. A no brainer perhaps, but I just wanted to mention this here.

This article is part of the GWB Archives. Original Author: Michael J. Hamilton, Sr.

New on Geeks with Blogs

  • We Won The One Award I Actually Care About

    Full Scale made the Inc. 5000 for the fifth year straight, the 12th listing across my three companies. Here is why the one award you cannot buy is worth stopping for.

  • Your Customers Build the Features Now

    I let a tool I liked sit dead for a year rather than build the features I wanted. An MCP server meant I never had to, and your customers can do the same to your product.

  • Get the Size of a Directory in Linux the Easy Way

    du -sh for the quick answer, ncdu for the cleanup, df for the disk itself: every command for checking directory size in Linux, plus why du and df never agree.

  • Vim Search and Replace: The Ultimate Guide

    One :%s command replaces every match in a file before a find dialog would even open. The Vim substitute patterns worth the muscle memory: flags, ranges, capture groups, and multi-file edits.