Error Message When Trying to Modify the Local SAM in Windows 2000 with Usrmgr

• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Professional

SYMPTOMS

If you need to change the local Security Accounts Manager (SAM) database in Active Directory Restore mode, you cannot make the changes by using the User Manager tool included with Windows 2000. When you try to do so, you receive the following error message:

User Manager for Domains cannot be used to manage a Windows 2000 or higher domain. Do you want to select another domain to administer?

CAUSE

The User Manager tool that is included with Windows 2000 does not allow the management of Windows 2000 domains. The tool recognizes that the server is a Windows 2000-based server.

RESOLUTION

To work around this behavior, use any of the following methods:

• Install the User Manager tool from the Microsoft Windows NT 4.0 Server CD-ROM. This version of User Manager allows access to the local SAM database.



• Use the Lusrmgr.msc snap-in.



• Use the net user and net localgroup commands.

MORE INFORMATION

NOTE: To use any of these methods, you must be using Active Directory Restore mode. These methods do not access the local SAM database if you are not using Active Directory Restore mode.

Using the Windows NT 4.0 User Manager Tool

1. Insert the Windows NT Server 4.0 CD-ROM in the CD-ROM or DVD-ROM drive.



2. Use Windows Explorer to open the Clients\Srvtools\Winnt\I386 folder.



3. Copy the Usrmgr.exe file to a location on the server.



4. Restart the computer. Boot to Active Directory Restore mode by pressing F8 at the Boot menu.



5. Double-click the Usrmgr.exe file that you copied to the server.

Using the Lusrmgr.msc Snap-in

1. Restart the computer. Boot to Active Directory Restore mode by pressing F8 at the Boot menu.



2. Click Start, click Run, type lusrmgr.msc, and then click OK.



3. Double-click the Users folder.



4. Make the appropriate changes.

Using the net Commands

1. Restart your computer. Boot to Active Directory Restore mode by pressing F8 at the Boot menu.



2. You can use the net user and net localgroup commands at a command prompt to modify the local SAM database. For example, to create an additional administrator account, use the following commands




net user /add username
net localgroup administrators username /add

where username is the name of the new user.

Additional query words:

Keywords : kbenv kberrmsg kbtool
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbprb