I have two domain controllers replicating to each other. SRV-1 is my main domain controller while SRV-11 is my additional controller. When I create a user account on SRV-1 named "bsmith" is pops up on SRV-11 but the little face icon next to the name has a red/white "X" symbol on it. It appears to be disabled. However, the same account on SRV-1 where I originally created the account doesn't have the symbol. Vice versa happens when I create an account on SRV-11.

When I right-click on the account with the "X" icon I have an option labeled "disable account", but it appears to already be disabled from the way the icon looks. So I click on "disable account" option anyway and the icon stays the same. Next, I right-click again and this time I have the "enable account" option. When I click "enable account" the "X" disappears and the account appears to go back to normal.

Why is this happening? How come the account is getting disabled on the other server? Shouldn't it be enabled on all servers after creation? Also, why is it that I don't get the "enable account" option right off the bat when I right-click, instead of first having to click "disable account" in order to get the "enable account" option?

Thanks,
Jerry

hmm that is quite strange i've never actually seen that happen myself. I've worked on networks with many DC's but still not seen that. Only thing that you could try is, before checking the account on your 2nd DC. Log on and off with the newly created user. Then check the 2nd DC and see the state of the user account.