Computer Reset in AD and Trust Relationship

[jae]

How come the Computer Account Reset option in Active Directory never fixes trust relationship problems? Isn't that the point of it or am I missing something.

 

[JoeBleed]

There is another aggravating step that needs to be done on the client side. If you don't know it, save yourself the time and just unjoin the client from the domain, delete the computer account from the domain and give it time to replicate or push replication and then just rejoin.

If it is a critical server or has some odd ball software that this will upset, then search technet for it. You'll need a couple of things installed on the client computer to do it. If it's a server it may already have it.

It really should be a lot easer to do this. I've done this once just to try it. never again unless i have to. Though once you have the stuff installed on the client, it's just a fairly simple command.

 

[KB]

According to:
http://support.microsoft.com/kb/216393

"Resetting a computer account breaks that computer's connection to the domain and requires it to rejoin the domain. "

This appears to me to be by design. The benefit of resetting a computer account means that the computer will get the same SID. If you rejoin the domain without a password reset, the computr gets a new SID.