Resetting trust relationship between client pc and DC

[Rubycon]

Is this possible to do from the DC?

 

[KB]

Do you mean joining the PC into the domain? Nope, this has to be done on the PC.

 

[MiniDoom]

You can try reseting the computer account in AD.

 

[Rubycon]

Originally posted by: KB
Do you mean joining the PC into the domain? Nope, this has to be done on the PC.

No. PC is a domain member but its trust relationship can be broken when restoring an Acronis image, for example.

Normally I just disjoin and rejoin to re-establish it and was looking for a way to do it from the domain controller.

 

[MiniDoom]

You could use vbscript...
Text

 

[jparnell]

Good question - ive only ever done this from the client by moving back to a workgroup and then rejoining the domain.

Can anyone explain what the reset computer account options in AD Users & Computers does? Ive never found a use for it.

 

[RebateMonger]

Originally posted by: jparnell
Can anyone explain what the reset computer account options in AD Users & Computers does? Ive never found a use for it.

Microsoft KB: Resetting computer accounts in Windows

It appears that you STILL have to re-join the PC to the Domain, though, so I'm not sure what the advantage is. Maybe I'm missing something? This KB seems to imply that some of the non-GUI methods might not require a re-join, though?

 

[spikespiegal]

PC is a domain member but its trust relationship can be broken when restoring an Acronis image, for example.

Please tell me you aren't building images with the box already a Domain / AD member.

 

[RebateMonger]

Originally posted by: spikespiegal
Please tell me you aren't building images with the box already a Domain / AD member.

If you are trying to keep ongoing backups of client PCs, there's not much choice. Some desktop users have lots of added applications, some with complex setups, so you need to restore the latest image.

 

[mooseracing]

I only delete PC's from AD if there is a conflict, ie renamed PC and someone forgot and then made a dup. But then sometimes they need to be moved to workgroup then back to domain. I don't know of any other way.

And for the image thing we build new images with each new model of pc because of HAL issues. We configure them just enough tto deploy without joining the domain. When deployed we run a SID changing tool then join the domain. for people with alot of files, we clone their drives, put a fresh image on. Then copy their cloned drive either on the network or local. Then they can access all their files and add them as they want. I'm using Acronis but it allows you to look at the backup like its a giant folder so it's easy for users to get their files.