Solved

Lost trust with server, now can't rejoin domain because

Posted on 2014-10-07
11
251 Views
Last Modified: 2014-10-09
I have a PC (Windows 7) that lost trust with the server (Server 2003 r2) I took it off the domain and tried to rejoin but I get the following error "the join operation was not successful this could be because an existing computer account having name "XXXX"  was previously created using different credentials."
I deleted the object from Active Directory and tried renaming the PC. Anyone know what else I need to do?
0
Comment
Question by:peraspera
  • 5
  • 3
  • 3
11 Comments
 
LVL 19

Expert Comment

by:Miguel Angel Perez Muñoz
ID: 40365857
Ensure account used to join computer has enough privileges to do this.
By default, user account can join 10 computers to domain.
0
 

Author Comment

by:peraspera
ID: 40365868
I am using Server Admin account to join the PC to the domain.
0
 
LVL 19

Expert Comment

by:Miguel Angel Perez Muñoz
ID: 40365879
When you are joining computer to domain, you are asked to provide credentials. Ensure this credentials has enough privileges.
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 

Author Comment

by:peraspera
ID: 40365896
The credentials are the same that I use to join every computer to the domain. 100% positive they are correct
0
 
LVL 3

Expert Comment

by:TropicalBound
ID: 40365898
What do you mean by 'Server Admin'?  Are you using the original Domain Administrator account, or are you using an account that someone in your domain created?
0
 
LVL 19

Expert Comment

by:Miguel Angel Perez Muñoz
ID: 40365899
Since you have deleted old active directory account, must be a permission problem. This article may help you: http://support2.microsoft.com/kb/932455
You can try before, recreate account, place on OU and rejoin.
0
 

Author Comment

by:peraspera
ID: 40365907
TropicalBound - Original Domain Admin account
0
 
LVL 3

Expert Comment

by:TropicalBound
ID: 40365960
How many domain controllers do you have?  If more than one, did you verify the deletion synchronized across all DCs?

Just to clarify, you logged onto your DC as the Domain Administrator, opened AD Users and Computers, navigated to the appropriate OU, and deleted the Windows 7 computer object.  Correct?
0
 

Author Comment

by:peraspera
ID: 40366085
Great questions TropicalBound. There are 2 DC's and when I removed the object on one it did not sync across both. However if I rename the PC and try to join the new name shows up in both DC's as an object. The desktop then receives the error.

You are 100% correct on the process to remove the object.
0
 
LVL 3

Accepted Solution

by:
TropicalBound earned 500 total points
ID: 40368308
OK, so something is amiss with the sync.  For the quick fix, log onto each DC and delete the Win7 computer object, then see if you can rejoin the domain.
0
 

Author Closing Comment

by:peraspera
ID: 40370541
Thanks for all the help. I ended up rebuilding the PC because I needed to get the PC up and going. I still haven't figured out the reason that it happened but the rebuild fixed all.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
On some Windows 7 (SP1) computers, Windows Update becomes super slow even the computer is reasonably fast.  There's one solution that seemed to have worked well for me (after trying a few other suggested solutions).
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question