On Mon, Mar 17, 2014 at 4:44 PM, Charles Sullivan
<[email protected]> wrote:
> Is there a way I can rejoin a computer to the domain without first removing
> it?  This would be for a scenario where the computer object has been
> removed, or something similar to that.

  Procedure I use is:

1. Log on to computer as local admin
2. Tell computer to leave the domain
2a. Give it bogus credentials when it prompts for an account to
connect to the domain with
2b. Don't reboot
3. Tell computer to join domain
3a. Give it proper credentials this time
3b. Reboot when prompted

  Item 2a is to prevent the computer from removing anything from
Active Directory.  That way, when you (re)join it, there's a greater
chance that things will still be there.

  Item 2b is to prevent the computer from ever acting on the fact that
it's not a domain member anymore (and uninstalling software, reversing
Group Policy, screwing up permissions, etc.).

  One could unplug the network cable for step 2 instead, I suppose.

  Credit to Bonnie Miller for the idea.

-- Ben


Reply via email to