Rejoin a Computer to Its Domain

27/11/2012

7 comments

Enterprise computers occasionally lose the secure channel with their domain, for various reasons. To regain the secure channel our helpdesk simply disjoin the workstation/server from the domain, reboots the machine, add the computer to the domain and reboot again. This process is simple, but very tedious, of course you can always try to use Netdom/NLTest command, personally I prefer using the network ID wizard:

  • Under system properties select the computer name tab

image

  • Click on Network ID button

image

  • Click on NEXT and select the first option in the new windows

image

  1. Click on NEXT and select the first option again

image

  • Click on NEXT
  • Fill in the your admin account details – account Name ,Password and domain name
    • Should be an account which has the right to add computers to the domain

image

  • The machine account probably exists in the domain, so you will be asked to use it, answer YES

image

  • If you use the administrator account you don’t need to add it again to the local administrators group

image

  • Click next and Finish the wizard.
  • At the following windows (system properties window) click on the OK button.

image

  • Now you will be asked to reboot your machine, click YES

image

  • As my friend, Omer Riff says “Sha Ba Boom”, your computer came back to be a part of the domain.

(function(i,s,o,g,r,a,m){i[‘GoogleAnalyticsObject’]=r;i[r]=i[r]||function(){
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
})(window,document,’script’,’//www.google-analytics.com/analytics.js’,’ga’);

ga(‘create’, ‘UA-54043030-1’, ‘auto’);
ga(‘send’, ‘pageview’);

Add comment
facebook linkedin twitter email

Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

*

7 comments

  1. Yury Musyuk29/11/2012 ב 04:11

    Excellent article and useful as usual (like all Dolev’s articles). Dolav, thank you!

    Reply
  2. Martin30/11/2012 ב 18:25

    The shortest way to accomplish this is by simply clicking the ‘change’ button in the system properties applet, entering the NetBIOS domain name instead of the FQDN, then click ‘OK’, ‘OK’ and restart.
    Obviously this wouldn’t work in an SLD environment 🙂

    Reply
  3. Remigio Oscar09/12/2012 ב 06:37

    Good article!! 🙂

    Reply
  4. Ágúst J10/12/2012 ב 05:15

    I simply add the computer to workgroup, skip restart, an join the domain again.

    Reply
  5. Angel20/12/2012 ב 19:18

    Why are workstations loosing sc? nltest is good to test sc I should not use it to reset sc I would use netdom tool.

    Reply
  6. Shaba29/01/2013 ב 01:58

    Thanks for sharing this. Its a common issue in my environment. Do you have any clue how to identify the root cause of this issue?

    Reply
  7. Jun07/03/2013 ב 07:39

    This is only happening to computers that have been turned off for more than 30 days (default behaviour)or if you have reimaged a pc using an image that’s been joined to the domain with the same computer name which is now in conflict with the other one. Easiest way to achieve this is by right-clicking the computer account in A/D and reset account that is if the computer name is not duplicated. Assuming you are creating an image for your SOE refrain or don’t forget to disjoin first the pc from domain and give it a unique name so there will be no conflict. Hope this helps.

    Reply