I have worked with active directory, and made OU's and things like that, however, I know I could learn A LOT more about it. One thing that I noticed and haven't figured out is, when I am joining a computer to the domain, if the computer is already setup on domain1 and I have to join it to domain2, if I just go to system properties on the computer and under the computer name tab, if I click the "change" button, and change the domain name, after I put in my credentials it gives an error stating
"The join operations was not successful. this could be because an existing computer account having name "computer1" was previously created using a different computer name, or contact your administrator to remove any stale conflicting account. The error was: Access is denied. "
So if I go into Active Directory Users and Computers, and add the computer, then change the domain, it joins the domain without a problem.
When I build a new computer ( we use SCCM ) I don't create a computer account in Active Directory. Through SCCM, I just name the computer and it gets joined to the domain through the imaging process.
So I don't understand why I have to manually add the computer in the first scenario?