Verify computer account in AD belongs to local computer?

  • Thread starter Thread starter Decumanus Maximus
  • Start date Start date
D

Decumanus Maximus

I would like to verify that the local computer, before joining the
domain, "belongs" to a computer account on the network in the case
where a computer is re-imaged. For example, it is possible that a
computer in the AD domain has been erroneously named and joined to the
domain using a computer name reserved for another computer. Therefore,
a computer account exists on the domain for a computer that doesn't
belong to that account. When the time comes for that computer to be
joined to the domain, I'd like to verify that the computer account
truly belongs to that computer and not another computer on the domain.
Make sense? I suspect SIDs, GUIDs and MAC addresses have something to
do with it. Is there a consistent manner in which to check this?
 
Well you can always look at the DNS entry for the computer object and ping
that entry to make sure that it is alive. You can also look at the metadata
replication of that object to lokk at the time line when it was added and
when was that last time anything changed on it.

Krishna
 
Back
Top