Skip to main content

Windows: Repair a Domain Machine Account

Here's a quick way to repair the domain membership for a machine account.

It doesn't require two reboots and new machine account churn.

To do so, open an elevated command line prompt and do this:

Test-ComputerSecureChannel -Verbose
# and only if that returns False:
Test-ComputerSecureChannel -Repair -Credential MFGDUR\<your-admin-account>

The repair resets the machine-account password with the domain in seconds, no reboot, no rejoin.

Once executed, verify domain membership, by following this page: