Re: Reset computer account

Johnny,

There are user account objects just like there are computer account objects.
The computer account objects have a secure channel with a Domain Controller.
Over this secure channel the workstation and the Domain Controller
communicate. In WIN2000 the computer account objects change their secret
password every 30 days ( in WINNT 4.0 it was seven days ). Sometimes this
secure channel gets flubbed up...for whatever reason. So, based on what I
just wrote you can see how this can create a little bit of a problem. So,
in order to resolve the problem of the flubbed up secure channel you
Microsoft gives us the ability to reset that secure channel.

I *think* that this should clear up any misunderstandings.

For all others, have I properly explained how this works?

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com



"Johnny Chow" <jchow10@xxxxxxxxx> wrote in message
news:OM8W4FPUFHA.548@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
> I understand add, move and delete computer account. I do not understand
> the purpose of reset computer account in AD and when to use it. I will
> be appreciated your information and tips.
>
> Thank you in advance,
>
> Johnny Chow
>


.

Relevant Pages

  • RE: dr testing but cannot logon
    ... This behavior may occur if the password for the computer account and the ... Reset the secure channel between the Windows XP-based client computer and ... Support\Tools folder of the Windows XP CD-ROM. ... Check the event logs on both the PDC and Windows XP client computer. ...
    (microsoft.public.win2000.active_directory)
  • Re: Reset computer account
    ... > There are user account objects just like there are computer account objects. ... > The computer account objects have a secure channel with a Domain Controller. ... > Microsoft gives us the ability to reset that secure channel. ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain login Problem
    ... Verify IP configuration of the client (in particular its DNS settings) and make sure that the computer account exists in AD. ... Test its secure channel to a target domain controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Secure Channel Password
    ... My understanding is ... controller will disable the computer account. ... run on a domain computer will detect if the secure channel to the domain is ... > Does the Secure Channel Password change whenever one restarts the server? ...
    (microsoft.public.win2000.security)
  • Re: AD Software Install
    ... objects are in one OU and all of the WINXP Pro computer account objects are ... WINXP via GPO). ... remove the Authenticated Users security group form the GPOs ...
    (microsoft.public.win2000.active_directory)