How to fix/recreate Machine Accounts deleted from AD

[j***@gmail.com]

This is a total win xp pro client / 2003 server environment.

I have not been able to determine why or how these accounts get removed
but after it happens you get netlogon errors everywhere and a "windows
cannot connect to the domain either because the DC is down or
unavailable or because your account was not found." when you try and
login. If i go to AD and search for the computer - its no longer in AD.
I can fix this problem by removing the pc from the domain and then
re-adding it. I can't get netdom to do it though, it gives me this
error "No mapping between account names and security IDs was done"
wheni try to remove and won't let me "join" casue it thinks its a
member already. I login with the local admin password. So here is my
question, can i add the pc back to AD manually and then synch the
passwords between the AD machine account and the server? I have tried
with netdom resetpwd but i get the same SID error mentioned above.
Anyone have any suggestions? Its odd i cant use netdom to remove from
the domain even when i pass the correct userD and userO account info
yet i can do it from the GUI.

[Mallika]

Netdom command is used to reset domain controller password....

You can you dsmod to reset computer password.

Yes. You can do that.... Login with local account. Move computer to
workgroup and add computer back to domain.

Hope this Info will help u.

Mallika.

Post by j***@gmail.com
This is a total win xp pro client / 2003 server environment.
I have not been able to determine why or how these accounts get removed
but after it happens you get netlogon errors everywhere and a "windows
cannot connect to the domain either because the DC is down or
unavailable or because your account was not found." when you try and
login. If i go to AD and search for the computer - its no longer in AD.
I can fix this problem by removing the pc from the domain and then
re-adding it. I can't get netdom to do it though, it gives me this
error "No mapping between account names and security IDs was done"
wheni try to remove and won't let me "join" casue it thinks its a
member already. I login with the local admin password. So here is my
question, can i add the pc back to AD manually and then synch the
passwords between the AD machine account and the server? I have tried
with netdom resetpwd but i get the same SID error mentioned above.
Anyone have any suggestions? Its odd i cant use netdom to remove from
the domain even when i pass the correct userD and userO account info
yet i can do it from the GUI.