Solved

Refreshing SID's in Active Directory 2000

Posted on 2006-11-06
4
254 Views
Last Modified: 2013-12-23
I have 5 machines that are all identical, all Windows XP Professional 64. All were setup using the same ghost image which was take of 1 of the machines. Unfortunately sysprep was not run before taking the image so when all the machines were setup they all had the same name, on the same domain, with the same SIDs. Upon booting up the each machine, i removed it from the domain, changed the name and then rebooted. Then i added it back into the domain. I was under the impression that this would create new SIDs but i don't think it has. We are now getting user errors when trying to login to these machines saying the computer/user has been locked out. I assume this has something to do with duplicate SIDs in Active Directory. Does anyone know how i can resolve this problem? How can i renew the SIDs for each machine?
0
Comment
Question by:Forensicon
  • 2
4 Comments
 
LVL 82

Accepted Solution

by:
oBdA earned 500 total points
Comment Utility
The only way to get your systems back to a state where you will be able to get MS support if you should ever need it is to re-image them correctly (which means deploying an image that has been syspreped; note the part about "If an image was created without the use of sysprep, Microsoft does not support the running of Sysprep after the image is deployed as a way to bring the computer back into compliance.") If you can live without support, you can just run it on the machines.
The Microsoft policy concerning disk duplication of Windows XP installations
http://support.microsoft.com/?kbid=314828
There's a link in the article to Sysinternal's NewSid, but I don't know if this will run on XP 64 as well (and it doesn't solve the support problem).
Whichever method you chose, unjoin the machines from the domain before you start!
0
 
LVL 5

Expert Comment

by:cjtraman
Comment Utility
http://www.sysinternals.com/Utilities/NewSid.html

check if that helps..Ensure you remove the desktop from domain before imaging.
0
 
LVL 82

Expert Comment

by:oBdA
Comment Utility
"Did you ever have a Deja Vu, Mrs. Lancaster?" - "I don't think so, but I could check with the kitchen." [Groundhog Day]
0
 

Author Comment

by:Forensicon
Comment Utility
THanks for your help guys. Turns out i didn't need to go through any of those steps though. After Makings sure all the machines had different IPs (they didn't), and changing their names and removing them and re-adding them to the Domain everything seems to work again. That sysinternals program is pretty cool though, thanks for the info.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now