Domain Controller Account

Applies To: Windows Server 2008 R2

Domain controllers use the machine account of other domain controllers for authentication. Domain controllers must authenticate with each other before they can communicate with each other.

Events

Event ID Source Message

12298

SAM

The account %1 cannot be converted to be a domain controller account as its object class attribute in the directory is not computer or is not derived from computer. If this is caused by an attempt to install a pre Windows 2000 domain controller in a Windows 2000 domain or later, then you should precreate the account for the domain controller with the correct object class.

DB Upgrade/DC Promotion/DC Demotion

Active Directory