RE: Quick question on resetting computer accounts in AD
- From: v-terliu@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
- Date: Tue, 17 Jul 2007 10:12:43 GMT
Hello Keith,
Thank you for kind update. And thanks for Kevin's input.
Kevin is correct, resetting a computer account breaks that computer's
connection to the domain and requires it to rejoin the domain. It is same
as delete the computer and rejoin the same computer to the domain.
Reset a Computer Account
To perform this procedure, you must be a member of the Account Operators
group, the Domain Admins group, or the Enterprise Admins group in Active
Directory, or you must have been delegated the appropriate authority. As a
security best practice, consider using Run as to perform this procedure.
1. Click Start , point to Programs , point to Administrative Tools , and
then click Active Directory Users and Computers .
2. In the console tree, under the domain node, click Computers , or click
the folder in which the computer is located.
3. In the details pane, right-click the computer, and then click Reset
Account .
To reset a computer account using a command line, type the following at a
command prompt, and then press ENTER
dsmod computer ComputerDN -reset
where ComputerDN specifies the distinguished names of one or more computer
objects that you want to reset. To view the complete syntax for this
command, at a command prompt, type dsmod computer /? .
Hope these steps will give you some help.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Quick question on resetting computer accounts in AD
| thread-index: AcfH0SwfJzi10q21TAezg2DtJX3Dww==
| X-WBNR-Posting-Host: 207.46.19.197
| From: =?Utf-8?B?S2VpdGggTGF3cmVuY2UgTUNQ?=
<KeithLawrenceMCP@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <A2FEA666-432E-4527-8E4E-15B0EA169118@xxxxxxxxxxxxx>
<T97N3G3xHHA.4308@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Quick question on resetting computer accounts in AD
| Date: Mon, 16 Jul 2007 10:46:00 -0700
| Lines: 129
| Message-ID: <890D893B-EA02-4223-BB85-E15F55F789EF@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:50615
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Terence,
|
| Thanks for the reply and the reminder that I can use advanced management.
| The question was really intended to find out if it is acceptable to reset
an
| account in SBS (for the purpose of re-joining a computer) instead of
deleting
| and recreating the account.
|
| Is it okay to use the reset account function?
|
| Keith
|
| "Terence Liu [MSFT]" wrote:
|
| > Hello Keith,
| >
| > Thank you for posting here.
| >
| > According to your description, I understand that you want to know why
the
| > SBS Server Management console does not have "Reset Account" command to
| > reset computer account. If I have misunderstood the problem, please
don't
| > hesitate to let me know.
| >
| > In fact, the SBS Server Management console has already integrated ADUC,
you
| > can run "Reset Account" command under SBS Server Management console.
| >
| > 1. Please open Server Management console on SBS
| > 2. Extend Advanced Management->Active Directory Users and Computers
| > [name.domain.local]->domain.local->MyBusiness->Computers->SBSComputers
| > 3. Right click the computer account in right pane, select "Reset
Account"
| > command.
| >
| > Hope these steps will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: Quick question on resetting computer accounts in AD
| > | thread-index: AcfHNCf2DWi7dEDITeeZSucNbInucA==
| > | X-WBNR-Posting-Host: 207.46.19.168
| > | From: =?Utf-8?B?S2VpdGggTGF3cmVuY2UgTUNQ?=
| > <KeithLawrenceMCP@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Quick question on resetting computer accounts in AD
| > | Date: Sun, 15 Jul 2007 16:02:02 -0700
| > | Lines: 23
| > | Message-ID: <A2FEA666-432E-4527-8E4E-15B0EA169118@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:50445
| > | NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hi,
| > |
| > | This is a kinda minor and slightly dumb question but is just
something
| > that
| > | has occurred to me each time ive had to rebuild a customers computer
and
| > | re-join to the domain.
| > |
| > | When I worked with a few IT teams in "big server" land, they had
| > dedicated
| > | AD people to manage their domains. When A pc/laptop had died and was
| > rebuilt
| > | (on new or same hardware), the AD computer account was simply reset
(in
| > ADUC
| > | - right click > Reset Account) and the machine was joined to the
domain
| > again.
| > |
| > | In SBS Management Console there is no facility to do this, just the
| > option
| > | of removing the computer from the network. To join the computer back
to
| > the
| > | domain with the same name requires removal and recreation of the
account.
| > |
| > | Now, I know there is dsa.msc and you can browse to ADUC via
| > administrative
| > | tools on an SBS and accomplish the same thing but is there any reason
why
| > | Reset Account was omitted from the SBS console? Does SBS not like
| > accounts
| > | being reset? Are there any implications of doing this?
| > |
| > | Like I said, no biggie, im just interested.
| > |
| > |
| > |
| >
| >
|
.
- References:
- RE: Quick question on resetting computer accounts in AD
- From: Terence Liu [MSFT]
- RE: Quick question on resetting computer accounts in AD
- From: Keith Lawrence MCP
- RE: Quick question on resetting computer accounts in AD
- Prev by Date: Re: Big problem with SBS 2003
- Next by Date: Re: Big problem with SBS 2003
- Previous by thread: Re: Quick question on resetting computer accounts in AD
- Next by thread: https on a port other than 443
- Index(es):
Relevant Pages
|
