RE: [ActiveDir] AD computer accounts being removed

[Rich Milburn]

Title: Message

> Is there a big learning curve with Sysprep? Well, there can be.  It depends on what you do to your master before you image it.  If you do a lot of profile customization, then yes, because sysprep cleans out the profiles, and you’ll need to figure out how to apply settings to the default profile, or figure out how to script them.  Since you are using AD you don’t have the lack of GPO issue I did.  For example, on our workgroup systems, we create a certain account and set up that profile, lock it down etc.  If I sysprep it, that profile gets removed and a new one is created when that user logs into the sysprepped computer – without any of the customizations.  There are ways around this, but I couldn’t solve all of them so for now on our newer XP systems we use a silent install with scripted profile configuration and lockdowns.  It takes 38 minutes from DVD incl. Office 2003 install, so it’s not too bad – sysprep using an ximage image took 25 minutes on the same box, most of that was DVD to HDD copy time though.   ----------------------------------------------------------------------- Rich Milburn MCSE, Microsoft MVP - Directory Services Sr Network Analyst, Field Platform Development Applebee's International, Inc. 4551 W. 107th St Overland Park, KS 66207 913-967-2819 ---------------------------------------------------------------------- ”I love the smell of red herrings in the morning” - anonymous From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Garyphold Sent: Thursday, January 19, 2006 7:01 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD computer accounts being removed   Thanks for the link Nav.   I use Symantec (PowerQuest) V2i Desktop (DriveImage).  Haven't used Ghost (Ghostwalker) or Sysprep.  Been wanting to experiment with Sysprep but haven't had the time.  I was thinking about that this morning though.  Is there a big learning curve with Sysprep?    I use V2i for cloning, because I'm already using that for backups of all the workstations and all the servers.  Hard drive backups instead of tape.  Without sysprep, I'm stuck being able to only clone like machines.    I really need to learn to use Sysprep.  Too many fires burning right now.   Gary     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Navroz Shariff Sent: Wednesday, January 18, 2006 3:29 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD computer accounts being removed Hi Gary,   Try looking at this article from MS regarding 'Resetting computer accounts in Windows 2000 and Windows XP'. http://support.microsoft.com/kb/216393/EN-US/   Also, you join the computer to the domain and then change its name? Do you reset the SIDs of the cloned workstation using GhostWalker or Sysprep?   -Nav     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Garyphold Sent: Wednesday, January 18, 2006 3:04 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD computer accounts being removed Brenda,   FWIW:  It happens to me when I clone a workstation then try to join that workstation to the domain in order to change the computer name.  AD sees 2 machines with the same name, gives me a notification and lets the 2nd one in.  Then when the original machine with that name logs in next time, it isn't seen on the network.  Then I have to do the same thing you did - with the original machine.  Then all is well again.  Don't know if that will help, but it might narrow down the problem some.   Gary   Gary Polvinale Denton ATD     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brenda Casey Sent: Wednesday, January 18, 2006 2:24 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD computer accounts being removed Yes, their computer account in AD is actually gone.   Thanks, Brenda   Brenda Casey Network Manager Billings Public Schools [EMAIL PROTECTED] 406-247-3792     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: Wednesday, January 18, 2006 11:14 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD computer accounts being removed When you say "lose their account", do you mean the computer object in AD disappears? Or something else?   -g   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brenda Casey Sent: Wednesday, January 18, 2006 10:42 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD computer accounts being removed Occasionally computers will lose their account in Active Directory for no apparent reason. Sometimes it is a computer that has just joined the domain, while other times the machine has been a member of the domain for 2 years.  The computer can only be logged on by a local account (not a domain account).  To remedy this, the computer has to be disjoined from the domain, join a workgroup, then join the domain again.  As I am sure you all are aware, this is not only time consuming, but very inappropriate to have to do.    Has anyone else had this experience and how have you fixed it?   Thanks, Brenda -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.