New XP PC replacing old XP - Access Denied

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: allan grossman [mvp] (allan_grossman_at_hotmail.com)
Date: 04/23/04 

Date: Fri, 23 Apr 2004 09:14:14 -0700

Sure thing, Steve -

This may not be something that can be accomplished at
your level, I'm afraid.

If you have enough horsepower on the network you can
create the machine account yourself, but without
sufficient rights on the domain to create a machine
account you'll need some assistance from someone who does
have the appropriate permissions.

If you do have appropriate permissions on the network to
create machine accounts you could join the domain under a
different computer name but without using server-specific
tools (that don't ship with Windows XP) you wouldn't be
able to delete the old machine account.

It'd probably be best to contact a domain admin to do the
machine account thing for you - if you tell him you need
your old machine account deleted and a new one created
with the same name he'll know exactly what you mean.

Hope this helps -

>-----Original Message-----
>Thanks for the quick reply, Allan. Could you please
>elaborate a little more on "delete the original machine
>account on the domain and create a new one". Thanks!
>
>Steve
>
>>-----Original Message-----
>>Hi, Steve -
>>
>>You'll need to delete the original machine account on
>the
>>domain and create a new one.
>>
>>Standing up a new PC with the same name alone won't let
>>your PC onto the domain because the security identifier
>>(SID) of the new PC doesn't match the one associated
>with
>>the domain's machine account for your old PC. It's a
>>pretty simple fix, really.
>>
>>Hope this helps -
>>
>>>-----Original Message-----
>>>I am replacing an older XP computer on our network
>>>(Windows 2000 Server) with a new XP computer. I am
>>using
>>>the exact same IP address, Computer Name, Domain name,
>>>DNS preferred and alternate, etc. I went through the
>>new
>>>computer wizard when I first brought up this PC and
>>>answered all the questions indicating this would be on
>a
>>>network and provided all the info. Then I went into
My
>>>Computer, Properties, Computer Name tab, and, since it
>>>was "Workgroup", I clicked on "To rename this computer
>>or
>>>join a domain, click Change". After filling in the
>>>computer name and domain name, clicking on OK, and
>>>filling in the User name and password, I get the
>>>following error message: "Your computer could not be
>>>joined to the domain because the following error has
>>>occurred: Access is denied". I know I have the
>correct
>>>User name and password. What have I done wrong??
>>>
>>>Steve Ikard
>>>
>>>.
>>>
>>.
>>
>.
>

Relevant Pages

  • Re: Some "cool" applications of networking?
    ... But the MACHINE account is ... new SUS server ... I'd like to change us over to a domain-based network ... All users should be on XP Pro, ...
    (microsoft.public.win2000.networking)
  • Re: \Server is not accessible
    ... to reset the machine account. ... check the system event logs on that computer ... > All users are setup exactly the same (i.e., there network settings). ... > There are currently no logon servers available to service the logon ...
    (microsoft.public.win2000.networking)
  • New XP PC replacing old XP - Access Denied
    ... You'll need to delete the original machine account on the ... Standing up a new PC with the same name alone won't let ... >network and provided all the info. ... >filling in the User name and password, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Machine account not recognized
    ... another test machine added later to the test configuration, ... Changing the network name to the ... already existing name triggers the question that the machine account is ... That's likely to be that the machine account password is out of synch between the workstation and the DC. ...
    (microsoft.public.backoffice.smallbiz)
  • Re: MSMQ send blocking?
    ... > I got another problem though, since my service is creating the queue it ... > seems that I don't have permissions to read it from my application. ... It makes little sense to grant fullcontrol to the machine account, ... be a domain name or a local machine name, or a group name like ...
    (microsoft.public.dotnet.languages.csharp)