How Windows 2003 Active Directory management fixes compromised computer accounts

In most cases, the client's domain account has the ability to repair itself. But sometimes, especially in very large domain networks, accounts cannot be connected to the domain or functioning properly. This makes it impossible for a client to log on to the domain as a client account in a valid domain.

If you suspect that the client account is missing, corrupted, or not functioning properly, you can restore its functionality by following these steps. Note, however, that you need to complete all the steps in the list, and stopping after you reset the account does not solve the problem. Resetting the computer account changes the password to log on to the domain. If there is no reconnection, the client system does not know its new password.

To do this, you need to be a domain system administrator, an enterprise system Manager, or a person with a fairly authorized qualification. In addition, in addition to domain controllers, this operation can be done in any system.

1. There are two different ways to reset your computer account:

A. Open the Active Directory user and computer to point to the computer account number. The computer account number is usually the default, and if the account is not found, check your OU (organizational unit). Right-click the computer account name, select "Reset" in the pop-up menu;

B. Open the command line, enter "dsmod computer <computername>-reset" and replace the <computername> with the changed name.

2. After you set up your account, you need to log off and log back on to the domain:

A. Right click on "My Computer", in the pop-up menu midpoint "Properties";

B. "Change" in the midpoint of "computer name";

C. Select "Workgroup" and click "OK";

D. Restart the computer;

E. Right click on "My Computer", select "Properties";

F. "Change" in the midpoint of "computer name";

G. Select "Domain", enter the changed domain name, then click "OK";

H. Restart the computer;

3. Log in to the domain with a user account in a domain to verify that the operation was successful.