HELP! Just removed a computer from its domain!

Bes · 7 Mar 2006 at 20:50

I cant log in to Windows any more. How do I put it back in the domain?

Thanks!!

Trigger · 7 Mar 2006 at 20:59

Bes said:
I cant log in to Windows any more. How do I put it back in the domain?

Thanks!!

You have to log on locally and join it to the domain manually- there's no other way to do it.

Bes · 7 Mar 2006 at 21:02

Damn I knew that would be the answer

I take it the local admin account for the system could do this for me then?

Pinkeyes · 7 Mar 2006 at 21:07

you need to log on to the machine locally with an account with admin permissions to allow you to join it to a domain.

You will then have to authorize the join with an account on the domain with relevant permissions, i.e. the domain administrator account.

GM@N · 7 Mar 2006 at 21:12

If you have forgotten the local admin login you could always use ultimate boot cd to reset the password. Google ultimate boot cd

Bes · 7 Mar 2006 at 21:24

Hmm its a work laptop so I dont want to risk making an even bigger dog's breakfast of it!

Also I don't know the details needed to put myself back in the domain (only the domain name).

Trigger · 7 Mar 2006 at 21:32

Bes said:
Hmm its a work laptop so I dont want to risk making an even bigger dog's breakfast of it!

Also I don't know the details needed to put myself back in the domain (only the domain name).

Well you must know the details because you need a domain admin account to remove it from the domain in the first place

Otacon · 7 Mar 2006 at 21:34

Trigger said:
Well you must know the details because you need a domain admin account to remove it from the domain in the first place

Not in all cases.

You cant put it back in a domain without access to a domain controller anyway, so you're stuffed. Best bet would be to try a system restore (if you have access to it).

Bes · 7 Mar 2006 at 21:39

Yea I was thinking about a system restore but I dont have a disc on me to use to do the system restore :mad:

Trigger · 7 Mar 2006 at 21:50

Otacon said:
Not in all cases.

How would you remove a client from the domain then without domain admin access?

Memphis · 7 Mar 2006 at 21:54

Bes said:
Yea I was thinking about a system restore but I dont have a disc on me to use to do the system restore

Uh, system restore is part of windows?

Bes · 7 Mar 2006 at 22:12

uh, I can't log into Windows, therefore cannot run system restore... Anyway IBM laptops have their own system restore feature which can be accessed without booting Windows, but there are no points to restore from in there

Ah well will just have to let the IT guy laugh at me tomorrow and help me put it back in the domain! At least I won't do it again!!!

MossyUK · 7 Mar 2006 at 22:17

i dont think you need to be a domain admin to add one PC to the domain. I seem to remember reading somewhere that all authenticated domain users can add one machine to the network, so you may be able to avoid the IT dept

I'd be interested to know if that point were true or not.

edit - ahhh but you would need a local account to log on

forgot about that.

Pixie · 7 Mar 2006 at 22:18

Trigger said:
How would you remove a client from the domain then without domain admin access?

When you remove the computer from the domain, all it does is tells the computer that it is no longer a member of that domain and then instructs for the computer account to be removed from Active Directory. If no credentials are specified the account is not removed from active directory.

Otacon · 7 Mar 2006 at 22:56

Trigger said:
How would you remove a client from the domain then without domain admin access?

Local admin access. See above.

bledd · 7 Mar 2006 at 23:02

Trigger said:
Well you must know the details because you need a domain admin account to remove it from the domain in the first place

in my work we can just set the pc to us say mshome workgroup, doesn't ask for user/pass

then to put back onto the domain it asks..

must be a setting in AD

bledd · 7 Mar 2006 at 23:03

MossyUK said:
i dont think you need to be a domain admin to add one PC to the domain. I seem to remember reading somewhere that all authenticated domain users can add one machine to the network, so you may be able to avoid the IT dept

I'd be interested to know if that point were true or not.

edit - ahhh but you would need a local account to log on forgot about that.

not all users can, you have to be in the permissions group to allow additions to the domain

Trigger · 7 Mar 2006 at 23:35

bledd. said:
in my work we can just set the pc to us say mshome workgroup, doesn't ask for user/pass

Well I get this when I try to remove my machine from my home domain even though I am logged on as admin. Same on the school network as well

bledd · 7 Mar 2006 at 23:58

like i said, must be an AD /domain setting

crashuk · 8 Mar 2006 at 01:08

one thing your at home so you cant log onto the domain at work, it wont let you, if your at home you need to log on as local user its the name of your laptop, then again if you have certain local rights then you can delete the domain membership from your pc then there might be a possiblity that you can add it back to the domain.

when you do into work chances are you will be able to log on depending on how they config the gpos, anyway loging onto the domain is an easy thing to do theres the prestaging when they input the computer name into a OU on AD, or the guy comes round and joins it via the gui or the command promp ie dsadd computer "cn=computersname, ou=sales, dc=microsoft, dc=com" -d microsoft.com -u administrator -p password