When the secure channel fails, you must reset the secure channel. Many administrators do so by removing the computer from the domain, putting it in a workgroup, and then rejoining the domain.
This is not a good practice, because it has the potential to delete the computer account altogether, which loses the computer's SID and, more importantly, its group memberships. When you rejoin the domain, even though the computer has the same name, the account has a new SID, and all the group memberships of the previous computer object must be re-created.
To reset the secure channel using the Active Directory Users and Computers snap-in:
- Right-click a computer, and then click Reset Account.
- Click Yes to confirm your choice.
- Rejoin the computer to the domain, and then reboot the computer.
To reset the secure channel using DSMod, type the following command, Rejoin the computer to the domain, and then reboot the computer.
- dsmod computer "ComputerDN" –reset.
To reset the secure channel using NetDom, type the following command:
- netdom reset MachineName /domain DomainName /UserO UserName /PasswordO {Password | *}
where the credentials belong to the local Administrators group of the computer.
This command resets the secure channel by attempting to reset the password on both the computer and the domain, so it does not require rejoining or rebooting.
To reset the secure channel using NLTest, on the computer that has lost its trust, type the command:
- NLTEST /SERVER:SERVERNAME /SC_RESET:DOMAIN\DOMAINCONTROLLER
For example:
nltest /server:SERVER02 /sc_reset:CONTOSO\SERVER01
This command, like NetDom, attempts to reset the secure channel by resetting the password on both the computer and in the domain, so it does not require rejoining or rebooting.
Because NLTest and NetDom reset the secure channel without requiring a reboot, you should try those commands first. Only if those are not successful should you use the Reset Account command or DSMod to reset the computer account.
Source :
http://web-foro.com/wl/CompanionContent/course/crse6425b_00_05_03_05.htm
