Solved

add/remove workstation from SBS 2008 domain?

Posted on 2010-09-17
11
1,947 Views
Last Modified: 2012-05-10
I want to remove a workstation from our SBS 2008 lan. Is that as simple as just deleting the machine and user? Will I be able to log on to the workstation locally?

Also, I want to add another workstation to this LAN that was never previously joined, but used to be joined to a different domain elsewhere. Therefore, it will have domain profile information. Is this doable without losing all the profile information>

These are probably simple, but I've never done it before. I've only migrated workstations and joined brand-new workstations.

THX.
0
Comment
Question by:jmarkfoley
  • 6
  • 5
11 Comments
 
LVL 3

Expert Comment

by:Lisij
Comment Utility
to remove the workstation from the domain, go to system-> computer name,
where you have domain/workgroup choice - select workgroup, type in any name (default MSHOME or WORKGROUP are just fine). When you click "OK" it will ask you for the domain username/password that have rights to add/remove workstations from the domain (typically administrator).
Fill in that info, it will tell you "Welcome to .... workgroup". After the reboot it will remove that workstation from the domain. The computer account still probably is going to be there for some time, disabled. Should go away by itself, or you can manually delete it after the workstation is removed.

Before you do remove the workstation from the domain make sure to reset passwords for local accounts as your domain accounts will not work. The domain profile (C:\Documents and Settings\user.domain\) will still be there.

as for the second workstation... was it removed from that "other" domain properly, or was it just shut down and brought to you. If it was removed properly, the procedure is same as with brand new PCs - login locally, run network wizard (i belive SBS2008 it starts through the web browser).

If the other computer is still technically a member of the different domain... as far as i know a computer can be a member in more then one domain. However, i havent done it myself.
0
 
LVL 1

Author Comment

by:jmarkfoley
Comment Utility
The second computer was never removed properly. The fly-in-the-ointment is that the "new" domain is the same name as the old domain. What happened was that this workstation was simply powered off when the employee retired. Meanwhile, we upgraded from SBS 2003 to SBS 2008. The new domain has the same name as the old domain. However, neither this workstation, nor user was ever joined to the new domain. Now, we want to fire it up again and start using it. I could change the machine name and user if that would help, but I'm a bit worried about all this. I've had nightmares before when proper workstation migrations were not done. Thoughts?
0
 
LVL 3

Expert Comment

by:Lisij
Comment Utility
if you actually upgraded, you shouldnt have problems.
if you blew away the old domain, and started from scratch new domain with the same name...
i belive that's what going to happen with the workstation when you turn it on:
it will try to authenticate against the domain, and the domain will not know what this station is. You will need to login with the local account, and re-run the "network ID" wizard. It will create an account on the domain for this workstation.
IF user has the same user name the same profile will be used. However, if any of the permissions were changed, certain files wouldnt be accessible.
I would backup that workstation off-line, rename the profile you want to use into "username.olddomain_backup", let the user login to create new profile, then , as-needed, i would copy files from the old profile.
You dont really need everything from there: Desktop, favorits... If old domain was done right, "my documents" were mapped to the network location and were backed up before you blew it away.
if you have exchange, and you migrated it too, mail will be delivered after you configure outlook.
If no exchange, grab .pst, .nk2 files, and the "Signature" folder.

We did something similar with one of our clients. However, all workstations were removed properly from the old domain and added to the new one.

If it was me in your shoes, i would backup the old workstation, restore factory image on it, add it, then moved files back.
0
 
LVL 1

Author Comment

by:jmarkfoley
Comment Utility
Well, it may not be too complex. I don't want to keep either the same user or same machine name for this new computer. The SBS 2003 either did not have or was not configured to backup the client desktops, but no matter.

In fact, I'm not sure of the steps. Do I create the new user account on the workstation first? Move the workstation to a workgroup first, then create a new local account? Create the user account on SBS first?

What do you suggest? fuggedabout backing up, etc. The old user data is no longer needed.
0
 
LVL 3

Accepted Solution

by:
Lisij earned 500 total points
Comment Utility
you need user acc created before the user can log in.
for the workstation, you dont need to create an account in advance, it will get created by itself when you add the workstation to the domain.

it will be created in "computer" container, or, for SBS servers, under "business\computer" (i belive). you can move it anywhere you want at any time.

bottom line, if you dont care about old data, make sure you can login with _any_ account into that old station. once you there, make sure you can ping the domain controller. If everything checks out, run the "Network ID" wizard, you should be fine.
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 
LVL 1

Author Comment

by:jmarkfoley
Comment Utility
thanks, that helps. I think I need to change the workstation to be a workgroup first. It won't let me change the machine name unless I do that.

Do you agree?
0
 
LVL 1

Author Comment

by:jmarkfoley
Comment Utility
Well, I think I've screwed up. I had 2 admistrator logins on that machine, one for domain hprs.local and one for VALERIE (the local machine). I verified that the user IDs for both were the same and both had the same password. I even changed the local machine password to make sure it was the same as the domain pw. I went into Control Panel > System > Computer Name > Change, and I change the machine name to "Interview", unchecked the hprs.local domain, and checked 'workgroup' and entered WORKGROUP as the name. It asked me for an admim ID and password with permission to remove the machine from the domain. I did that. It said I needed to reboot for the changes to take. I rebooted. It came up with the login screen (no domain) and I attempted to log in with the ID and PW I had configured. No go. Perhaps I should have added an admin account with new machine name, but when I tried that before renaming the machine I didn't have that option.

So, now I appear to be locked out of this computer. How do I get back in?
0
 
LVL 3

Expert Comment

by:Lisij
Comment Utility
try safe mode - login as administrator.
then control panel - admin tools - computer management - find "local users and groups" - expand "users", find username you want to use, then right click on it - reset password.

it will work if local admin account doesnt have the password or if you know it.
if you are SOL in this department, then you need to download utility to reset(clear) passwords.
Try above suggestion first, let me know if it fails.
i will find the link to the utility i always use and post here later.
0
 
LVL 3

Expert Comment

by:Lisij
Comment Utility
you ddidnt need to add any accounts, there would be one - "administrator". one problem could be is that it could be disabled.
http://pogostick.net/~pnh/ntpasswd/

here is the utility i've been using successfully for last 5 years (at least).
it does look scary for un-trained eye (text based linux based), but it takes all but 2 mins to reset the password. Author suggests to clear (blank) the password instead of setting it to something.
download the file from that site (iso image)
burn it.
make sure to read the how-to, i believe there was a step-by step instructions how to do it.
clear the passwword, reboot, login without the password
0
 
LVL 3

Expert Comment

by:Lisij
Comment Utility
0
 
LVL 1

Author Comment

by:jmarkfoley
Comment Utility
That utility did the trick! Thanks. I guess you're not suppose to change the machine name at the same time you change it to a WORKGROUP. Next time.

Thanks. I've got the workstation all set up in the new domain with a new user.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
how to add IIS SMTP to handle application/Scanner relays into office 365.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now