• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Possible to transfer machine SID from one PC to another?

Ghiddy

Senior member
Windows 7 won't boot on one of our user's laptops. It's Windows 7 Enterprise, and it's joined to our domain. After an automatic windows update, the laptop stopped booting, seemingly due to a driver change, or a change to something in the OS that Windows Update applied. The hard drive seems to work fine though, we can see everything when we go into System Recovery, but none of the repair or recovery options work. Restoring from restore points doesn't work either (stupid feature if it doesn't work).

We want to try just reinstalling win7 from scratch, and then transfering the Machine SID from the broken install to the new one so we don't have to rejoin the machine to the domain. Is this possible? Is there a tool that can read the SID(s) from the non-working image/drive, and then set the SID(s) on the new drive/image to the same values? And assuming we kept the machine name the same along with this, would we be able to successfully boot that new W7 install and have it be on our company domain?

I understand that there is something called a "Machine SID", unique to each windows install, and that this machine SID is what the domain uses to recognize each PC. If this SID changes then you need to re-join to the domain. You also cannot have multiple machines on the network with the same Machine SID at the same time. Are there any other SID's besides this machine SID that we have to worry about in this scenario?

In theory we can ask the IT team to rejoin to the domain but there are some company issues going on right now and our IT team is not handling any new non-critical requests right now, and not for the foreseable future. Otherwise we wouldn't even be troubleshooting the laptop's window's install ourselves (we are developers, not IT).
 
You'd need the machine account's password as well and I'm sure there's a lot of FM that goes on under the hood when you join a machine to the domain that you can't replicate by hand.
 
Rejoining to the domain is not a big deal, I've rejoined servers to a domain without a problem. Just reinstall Windows on the machine, then reset the computer account in AD and join the machine to the domain using the same name. It'll use the previous computer account. The SID is not really significant, which is why the sysinternals tool has been "discontinued."
 
Back
Top