Windows

• Validating AD Machine Account
• Windows: Repair a Domain Machine Account

Validating AD Machine Account

NOTE: If you are looking to fix a machine account, see this page: Windows: Repair a Domain Machine Account

Here's a couple ways to validate the machine account of a PC in an Active Directory domain:

NOTE: This must be run from an elevated window.

dsregcmd /status

If successful, it will output a device state of DomainJoined: yes.

NOTE: It outputs several blocks of info. So, you may have to scroll up to see the status.

Also. You can use this:

NOTE: This must be run from an elevated window.

nltest /sc_query:<<domain name>>

If successful, it will give a NERR_Success status, like this:

Windows: Repair a Domain Machine Account

Here's a quick way to repair the domain membership for a machine account.

It doesn't require two reboots and new machine account churn.

To do so, open an elevated command line prompt and do this:

Test-ComputerSecureChannel -Verbose
# and only if that returns False:
Test-ComputerSecureChannel -Repair -Credential MFGDUR\<your-admin-account>

The repair resets the machine-account password with the domain in seconds, no reboot, no rejoin.

Once executed, verify domain membership, by following this page: Validating AD Machine Account