Hello,
Been grappling with a problem for some time now:
We have a parent domain and a child domain with domain admin accounts in both domains.
Both domains contain two domain controllers each.
We recently performed an activity and upgraded all our domain controllers to Server 2016. The process we followed to "upgrade" the domain controllers was - joined the Server 2016 machines to the domains, then promoted these 2016 machines as domain controllers.
The older(Server 2012 R2) machines were demoted gracefully.
However, after this activity, we cannot login to the child domain's domain controllers using the domain admin accounts in the child domain. The only to login to these domain controllers is through the domain admin accounts in the parent domain.
We get the following error in the login screen:
You must be granted the Allow log on through the Remote Desktop Services Right.
We have verified that the account used to attempt a login to the domain controller is a member of the domain admins group and has the "Allow logon locally", "Access this computer from the network", "Allow logon through remote desktop services" privileges.
Any help or leads to help with this problem is greatly appreciated.
Cheers!