Windows: Repair a Domain Machine Account Here's a quick way to repair the domain membership for a machine account. It doesn't require two reboots and new machine account churn. To do so, open an elevated command line prompt and do this: Test-ComputerSecureChannel -Verbose # and only if that returns False: Test-ComputerSecureChannel -Repair -Credential MFGDUR\ The repair resets the machine-account password with the domain in seconds, no reboot, no rejoin. Once executed, verify domain membership, by following this page: Validating AD Machine Account