Possible to transfer machine SID from one PC to another?

Ghiddy

Senior member
Feb 14, 2011
306
0
0
Windows 7 won't boot on one of our user's laptops. It's Windows 7 Enterprise, and it's joined to our domain. After an automatic windows update, the laptop stopped booting, seemingly due to a driver change, or a change to something in the OS that Windows Update applied. The hard drive seems to work fine though, we can see everything when we go into System Recovery, but none of the repair or recovery options work. Restoring from restore points doesn't work either (stupid feature if it doesn't work).

We want to try just reinstalling win7 from scratch, and then transfering the Machine SID from the broken install to the new one so we don't have to rejoin the machine to the domain. Is this possible? Is there a tool that can read the SID(s) from the non-working image/drive, and then set the SID(s) on the new drive/image to the same values? And assuming we kept the machine name the same along with this, would we be able to successfully boot that new W7 install and have it be on our company domain?

I understand that there is something called a "Machine SID", unique to each windows install, and that this machine SID is what the domain uses to recognize each PC. If this SID changes then you need to re-join to the domain. You also cannot have multiple machines on the network with the same Machine SID at the same time. Are there any other SID's besides this machine SID that we have to worry about in this scenario?

In theory we can ask the IT team to rejoin to the domain but there are some company issues going on right now and our IT team is not handling any new non-critical requests right now, and not for the foreseable future. Otherwise we wouldn't even be troubleshooting the laptop's window's install ourselves (we are developers, not IT).
 

Nothinman

Elite Member
Sep 14, 2001
30,672
0
0
You'd need the machine account's password as well and I'm sure there's a lot of FM that goes on under the hood when you join a machine to the domain that you can't replicate by hand.
 

Jeff7181

Lifer
Aug 21, 2002
18,368
11
81
Rejoining to the domain is not a big deal, I've rejoined servers to a domain without a problem. Just reinstall Windows on the machine, then reset the computer account in AD and join the machine to the domain using the same name. It'll use the previous computer account. The SID is not really significant, which is why the sysinternals tool has been "discontinued."