Computer Accounts on the Domain

[BrianC25]

I need to be able to resychronize an NT 4.0 domain computer account with a Win2k workstation. The problem is that the Win2k workstation is an ghost image that is reused. So I can not just rejoin the domain because when I re-image the machine, the computer accounts don't match and I cannot login. I don't want to have to rejoin the domain every time I put down a new image. Plus, there are 4 other images that are based on the first, so I would have to remake all of these if I can't find a fix. Any one have any suggestions?

Thanks,
Bri

 

[AlexIT]

You should run sysprep before making an image, it clears the domain account info (and SID.) You will have to boot to the machine (not domain) and re-conect each machine after the image is installed.

Alex

 

[BrianC25]

Thanks for replying Alex.

The images are actually for a QA lab. They were just clean machines so we can test installs. We really didn't need to run sysprep because it was always going to be the same machine. The problem that has become my bad day is that after a certian time frame the workstation renogotiates a new computer account password from the domain controller. When I put down a fresh image, they are now out of sync and that's where I run into problems. There are 3 machines with 4 differnet images each, based on the first image. So I will have to redo 12 images if I can't find a fix.. blows..

 

[AlexIT]

Give the primapry login user the ability to join the domain (make new admin group with only this permission, add these users to it.) Now delete the computer account(s) in the domain and they should be able to reconnect.

For continuing re-connects, you can write a small VBS to delete those computer accounts periodically and schedule this with AT.

Alex

 

[jcma]

BrianC25, there's another workaround for this issue. I too am in QA and similarly ghost images for use interchangably testing in a Domain.

What we do is to bring up the PC/new image, go to My Computer change from the Domain to a Workgroup (name doesn't matter), then change back to join the Domain. Of course, you'll have to have the Domain Administrator username/pwd. I've found you don't even need to reboot after changing to the workgroup but will after joining the Domain.

I haven't ever had to delete objects on the server, so this seems to be the simplest option for me/our environment.