Re: Computer Accounts need to be reset



Just looking at this article, it appears that resetting a computer account
and disabling a computer account both
"break the computer's connection to the domain"
http://support.microsoft.com/kb/322684/en-us

hth
DDS

"Tim N." <Tim N.@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:87F14688-1F5E-4A7C-B70C-3D8E73E76752@xxxxxxxxxxxxxxxx
We are running a Windows Server 2003 domain.

We recently used a utility to find computer accounts in active directory
that had not reset their machine passwords in over 90 days, and then
disabled
all of these computer accounts in an effort to clean up old accounts that
are
no longer in use. We did not delete any accounts yet simply because we
wanted to verify that they were still in use.

One thing that we've noticed is that occasionally we will get calls from
users who have a machine (typically a laptop) that has not booted up in a
while and when they tried to log on, they get an error message that the
account is disabled. When we enable the account again, the user still
complains they can't get logged in. We have to reset the computer account
in
Active Directory in order to make it work (or they have to disjoin the
computer from the domain and join it back with the same name).

I would like to know why we have to reset the computer account instead of
just re-enabling the account on the domain? Can someone either answer
this
or point me to a technet article that describes this in more detail?

Thanks,

-Tim Nichols



.



Relevant Pages

  • Re: Computer Accounts not disabled or deleted? Please help
    ... Disabling a computer account when it leaves the domain IS the correct way ... > Currently running Win2k3 SP1 Active Directory. ... DNS and replication is fine, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Reset computer account
    ... > There are user account objects just like there are computer account objects. ... > The computer account objects have a secure channel with a Domain Controller. ... > Microsoft gives us the ability to reset that secure channel. ...
    (microsoft.public.win2000.active_directory)
  • Re: Trust Relationship Between 2 Domains
    ... secondary DNS servers. ... will need to rejoin the PC to the domain. ... I suggest you to reset computer account. ...
    (microsoft.public.windows.server.migration)
  • Re: Reset computer account
    ... In that scenario I would reset the Computer account first before trying the ... require the remove/add method. ...
    (microsoft.public.win2000.active_directory)
  • Re: Trust Relationship Between 2 Domains
    ... When responding to posts, please "Reply to Group" via your newsreader so ... I suggest you to reset computer account. ...
    (microsoft.public.windows.server.migration)

Loading