Verify a Domain Computer Account for a New Domain Controller

Applies To: Windows Server 2008, Windows Server 2008 R2

You can use this procedure to verify that a domain computer account is registered properly and that the Service Principal Names (SPNs) are advertised. This account is required for the domain controller to function as a domain controller in the domain.

Membership in Domain Admins, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).

To verify a domain computer account for a new domain controller

1. Open a Command Prompt as an administrator: On the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, provide Domain Admins credentials, if required, and then click Continue.

2. At the command prompt, type the following command, and then press ENTER:

   dcdiag /test:MachineAccount

3. It the test is successful, you should see the following message:

   <ComputerName> passed test MachineAccount.

   To receive more detailed information, including the SPNs that are found for the domain controller, use the /v option.