I had 2 DC's in my domain.
one of them died, and the last one has all roles, dcdiag
netdiag
show all checked as "good" - but i actually can't modify my "Administrator" account.
according to alot, googling, i have to reset my local machine username/password. to get some ne kerberos stuff.
as described here: https://support.microsoft.com/en-us/kb/837513
actually the netdom failed, with "Administrative limits exceeded" if i open the ads.msc, i see all my AD stuff, and can add/delete/modify users, except the "Administrator" - wich always fails also with the "Administrative limits exceeded"
i have no clue where to go from here, any help?
regards