Sunday, October 21, 2007

What Happens When Computer account for Exchange server reset in Active directory



In active directory consist of objects. These objects are users, computers, OU (organizational units) etc. Each computer objects have a secure channel with their Domain controller. Over this secure channel the workstation and the DC (domain controller) are able to talk each other. In WIN2000 the computer account objects change their secret password every 30 days, old NT days this was done every 7 days. If for some reason the computer account is reset (domain admin reset it) Microsoft gives us the ability to reset that secure channel by using Netdom.exe.

Go to Joe's site (www.joeware.net) and locate WIN32 tools, this way we can tell the last
time that the computer changed its 'secret password'

  • Each Windows-based computer maintains a machine account password history containing the current and previous passwords used for the account. When two computers attempt to authenticate with each other and a change to the current password is not yet received, Windows then relies on the previous password. If the sequence of password changes exceeds two changes, the computers involved may be unable to communicate, and you may receive error messages (for example, "Access Denied" error messages when Active Directory replication occurs).
  • Resetting a computer account breaks that computer's connection to the domain and requires it to rejoin the domain. In my scenario this was done on Exchange server. The computer account was reset and there was no way to log into the server, except server itself locally. Taking the server out from domain rebooting it, adding the server back to the domain worked. All exchange services were up and running after joining to domain with same name. Remember renaming Exchange will break the exchange and there will be no way to bring exchange back to the live from death, this is of course not supported by Microsoft.

Truthfully speaking, if I had to speculate, I would think resetting computer account for exchange would screw the exchange server. Taking the Exchange out from domain and adding it back is kind of worrying process especially in the production environment. Since I had no choice and little time to bring the exchange back online, I moved forward taking the server out fro domain and adding it back to the domain and saw all worked well Exchange server is up and running

Best

Oz ozugurlu

80 comments:

Anonymous said...

Hello there

Have ended up with the same situation on a live production enviroment.

I have the same reservations about the issues between exchange and re-joining the computer account (new SID etc) and so have avoided resettting the computer account.

I have tried a non-authoritative restore of the reset computer AD object and after replication I still cannot log into the machine.

Have been searching through KB's for a few hours now and pleased to have come accross your blog which has prompted me to give it a go... after another coffee!

Thanks for blogging your story!

Cheers

TysonMM said...

Did you test this and what was the outcome. I'm now in the same scenerio!

Oz Casey, Dedeal said...

just re-add into domain, This happened in the production and I was able to bring the exchange back to the domain with no problems, it sounds scary but it will be just fine
oz

Unknown said...

As far as I know, it doesn't hurt to reset the account as the computer joins the domain back with the same computer SID. So technically, resetting the Exchange Server account shouldn't hurt at all. I know the fear of the unknown but I think I have done so during my support days.

Daniel.S said...

This blog post was a lifesaver. Thanks from Sydney, Australia.

We had to change out the disks in the RAID5 array that contained our mailbox store. After a cascade of errors and problems, and an all-nighter by my colleague, we were at the stage where we couldn't log on to the domain on the Exchange server.

I found your blog post, and like you, we had to get Exchange back up and running (by this time it was 7:30AM on a Tuesday morning - 1 hour before people were due to start work)

We bit the bullet, removed the Exchange server from the domain, rebooted, re-added it, rebooted, and voila!

Exchange services are now working fine, ActiveSync and Webmail are fine, our Symantec Enterprise Vault is working, and our BES server is happy, as are we.

The Exchange server in question is part of an Exchange org that spans 2 sites, and contains 4 servers. The other servers are communicating with this one without problems.

Hope this comment helps confirm that the solution works for some other IT people who may be tearing their hair out as they read this page. It can be a bit daunting trying something that only 1 person has confirmed.

Also, make sure you don't delete the computer account for your Exchange server manually, as this will screw up the SID for that account.

Thanks again for posting this info.

Daniel

JM Multimedia said...

I have just started working from home and get my email from an exchange server via Entourage. On Sunday I noticed that my work email was "Not Connected". I sent an email to my boss on Monday morning and the IT guy advised that the server was "reset" over the weekend. What exactly does this mean and what is the purpose of resetting the server?

Thanks,
Jennifer

Oz Casey, Dedeal said...

It sounds like, reboot (power down and up ) the server. To be honest it could be something else, most often IT people does use general expression to explain the bad things.

The right question to ask would be "why" ( root cause) and make sure it won’t happen again (-:

Cheers
ocd

Andy said...

FWIW I just did this in my test lab and it worked OK. Had a replica AD enviroment and Exchange, but had been shutdown for several months so everything had tombstoned. Did a sysvol restore of AD to get both DCs back online, the rejoined Exchange back to the domain and seems fine.

Anonymous said...

Hi there,

For fix this problem, just log on exchange server with administrator local account and use this command netdom /resetpwd /server:yourdomaincontroler /UserD:domain\administrator /PassworD:yourpassworddomain

Hope this help
Metos

Anonymous said...

Thanks Metos alot. I run the command as your posted and it worked very well. you save my life. I appreciate.

The Tall One said...

Tried to do the netdom /resetpwd no change, nltest /SC_QUERY: came back with the same errors as the event log for Exchange that no DNS server could be contacted/no logon server. Test-ComputerSecureChannel also came back saying the domain didn't exist. So then why does my other 8 VMs work just fine with the same command....
I checked the lastlogon & lastlogontimestamp of these "problem" servers in AD, both are 4 months before today - even with a reboot of the server. And of course the netdom /resetpwd registers properly in the pwdLastSet attribute in AD - but does me no good.
I also had some apprehension of disjoining an Exchange server from the domain, performing a password reset of the computer account in AD, and then joining back, but I did just this and everything started working again. So the randomness behind these specific machines somewhat baffles me, but nonetheless - THIS WORKS!!!!!

Unknown said...

very helpfull post, its intresting....!!!!
cracked software download sites | Microsoft Office 2016 Cracked

Thomas said...

interesting :)

best regards
thomas von computer 22
versicherung-wv.blogspot.com | versicherung-wv.de | applicate-soft.de

APTRON Delhi said...

Nice blog Content. It is very informative and helpful. Please share more content. Thanks.
Exchange Server course in Delhi

Prerna said...

I just like the helpful information you provide in your articles. I will bookmark your blog and take a look at once more here regularly.
I am somewhat certain I’ll be informed plenty of new stuff right here! Good luck for the following!
https://www.classesofprofessionals.com/personality-development-courses-delhi

localebazar said...

hey...It is highly comprehensive and elaborated. Thanks for sharing!

Localebazar- Your single guide for exploring delicious foods, travel diaries and fitness stories.

Visit us for more- localebazar.com

Attitute Tally Academy said...

Thank you for sharing nice blog.
Java Training in Uttam Nagar

surbhi nahta said...

Thank you for the information and updates. I just stumbled upon your blog and wanted to say that I have really enjoyed browsing your blog posts. I am searching for this topic and I get exact post. I am also searching about Tally Course In Pune,try to write something about this topic.

Sakshi Sharma said...


Thanks for sharing such helpful information with us I appreciate your effort of writing a value able piece.
i also write on Spanish Language Course in Delhi.
Please share your review on that.

Anonymous said...

Hi,

Your article is too good and informative. I am searching For article related and I get exact article i am thankful to you for sharing such a helpful article.

Advanced Excel Training In Pune

Shivani said...


I could not resist commenting. Exceptionally well written!

Best Advanced Java Training In Bangalore Marathahalli

Advanced Java Courses In Bangalore Marathahalli

Advanced Java Training in Bangalore Marathahalli

Advanced Java Training Center In Bangalore

Advanced Java Institute In Marathahalli

cellphone52 said...

Thank you so much as you have been willing to share information with us
website: iphone repair near me

astrologer123 said...

Thanks for work.sharing the article. It is really valuable Information and I am impressed by your article. Keep doing such great
Web:marriage delay mantra

Himanshu said...

Great insights on Exchange server reset in Active directory. Thank you for this blog.

We will definitely incorporate this in our website for after school programs for kids at curio

aravind said...

This is most informative and also this post most user friendly and super navigation to all posts... Thank you so much for giving this information to me.Really you have done great job,There are may person searching about that now they will find enough resources by your post.
=DevOps Training in Chennai

DevOps Online Training in Chennai

DevOps Training in Bangalore

DevOps Training in Hyderabad

DevOps Training in Coimbatore

DevOps Training

DevOps Online Training

surya said...

Nice blog Content. It is very informative and helpful. Please share more content. Thanks.



angular js training in chennai

angular training in chennai

angular js online training in chennai

angular js training in bangalore

angular js training in hyderabad

angular js training in coimbatore

angular js training

angular js online training

Revathi said...

really very useful information..keep sharing!!

Android Training in Chennai

Android Online Training in Chennai

Android Training in Bangalore

Android Training in Hyderabad

Android Training in Coimbatore

Android Training

Android Online Training

vivekvedha said...

The information you shared with us was very helpful, thank you very much. Great post, Thanks for providing us this great knowledge, Keep it up.
acte chennai

acte complaints

acte reviews

acte trainer complaints

acte trainer reviews

acte velachery reviews complaints

acte tambaram reviews complaints

acte anna nagar reviews complaints

acte porur reviews complaints

acte omr reviews complaints

rocky said...

Great post! I am actually getting ready to across this information, It’s very helpful for this blog.Also great with all of the valuable information you have Keep up the good work you are doing well



python training in chennai

python course in chennai

python online training in chennai

python training in bangalore

python training in hyderabad

python online training

python training

python flask training

python flask online training

python training in coimbatore

shiva said...

Thanks for the informative article.
Cyber Security Training Course in Chennai | Certification | Cyber Security Online Training Course | Ethical Hacking Training Course in Chennai | Certification | Ethical Hacking Online Training Course |
CCNA Training Course in Chennai | Certification | CCNA Online Training Course | RPA Robotic Process Automation Training Course in Chennai | Certification | RPA Training Course Chennai | SEO Training in Chennai | Certification | SEO Online Training Course

mandyroy said...

Sometime few educational blogs become very helpful while getting relevant and new information related to your targeted area. As I found this blog and appreciate the information delivered to my database. Windows 10 home product key 64 bit

iraitech said...

KEEPING YOUR BUSINESS TECH SAFE IN 2020
While 2020 is a very bad year for businesses, hackers and scamsters on the other hand are having the time of their lives. While businesses are focused on keeping themselves alive and rolling, the covid crises has opened up a window of opportunity for hackers as they slip under the canopy of distressed and unaware employees. The aspect of cyber security was never so necessary and inconsequential. To not include cybersecurity as an existential business threat is a symptom of not knowing enough about the damage that hackers can do and is a very rookie or self-deprecating step for any entrepreneur or a business owner.
read more at https://www.iraitech.com/blog/keeping-your-business-tech-safe-in-2020

leadshire said...

HOW TO MARKET WHEN THERE’S EVERYTHING TO MARKET
The marketing and advertising industry and its exploring options in 2020 is an infinite ocean of constant learnings and evolution. People are selling wine through text messages, hiring house help through mobile applications, learning new courses on internet and making money by streaming their videogame plays. The extent of what is allowed and what is not, in the realm of content creation is no longer a function of available resources. Your creativity in imagination is the limit of how great your campaign can be. But there’s a flipside to it too. This inbound game has been struck with an abundance of information overload and spamming. Brands and marketers who are trying to break into the industry are pushing to the degree of annoyance to flash their content and services onto the customer’s screens. In this digital jungle of businesses and their relentless machines that bust out infinite content out into to world to bag in the biggest prey, how does one build a substantial customer base organically and ethically?
read more at http://leadshire.com/blog/How-to-market-when-there-is-everything-to-market

ashi123 said...

I always like to read a quality content having accurate information regarding the subject and the same thing I found in this post. Nice work
GST Registration | Company Registration

OGEN Infosystem (P) Limited said...

I’m really happy with this informative blog, thank you so much for sharing this. Ogen Infosystem infosystem is a leading Web Designing and SEO Service provider in Delhi, India.
Website Designing Company in Delhi

Subham said...

Great Content & Thanks For Sharing With oflox. Do You Want To Know How To Make Money From Mitron App

aspire world immigration said...

I read a lot of blog posts and I never heard of such a topic. I love the subject you have done about bloggers. Very simple. I am also writing a blog related to the best visa consultants, process, and application. You can also see this. Visa Consultant in Delhi

aspire world immigration said...


Good post, and thanks for sharing such an adorable post. I would love to see more articles / blogs. I am also writing about Personality Development Courses For Kids

aspire world immigration said...

I just like the helpful information you provide in your articles. I will bookmark your blog and take a look at it once more here regularly.
I am somewhat certain I’ll be informed of plenty of new stuff right here! Good luck with the following! please check and review the best visa Consultants in Delhi .

SEO Personal said...

Scintillating information! I always check on your blog to keep myself updated. Your content is really good to be up to date.
Farmhouse in Meerut
Top 10 CBSE School Meerut
Website Developer in Meerut
Website Designing Company in Hapur
SEO Company Meerut
Non Availability of Birth Certificate in Nagpur
Website designing Meerut


SMS BOMBER said...

nice post i love it checkout my blog to prank your friends
SMS BOMBER

Vipul Singh said...

Splendid information!
Plastic Surgeon Meerut

jbmglobal said...

I just stumbled upon your blog and it was great to be here! Definitely, this is a great post with great content
Visit Website

smartstart said...

Extraordinary blog! I recently went over your website and have found some interesting content. I am glad I found this amazing website on the web.
Check Website

steppingstone said...

I'm impressed, I must say. Very rarely do I come across a blog that's both informative and entertaining, and let me tell you, you've done a great job by providing this information to the users.
Website

Digital Marketing Agency Pakistan said...

Great post! Thanks for sharing. I like your content its unique and interesting, I have been always a fan of those who have this unique talent of writing unique content
digital marketing agency pakistan

Digital Marketing Agency Pakistan said...

Great post! Thanks for sharing.account management services

Rahul Sharma said...

This is Great Article. You are post informatics blog so keep posting.
Home Services Dial Karo App
Top SEO company in Meerut
Best SEO Company in Meerut
Top 10 CBSC Schools in Meerut
Matka Satta King
Digital Marketing Service Company
Satta Live Result
Free home services app
All type Services at Home

Anand Shankar said...

This is Great Article. You are post informatics blog so keep posting.
one funnel away challenge
one funnel away challenge
one funnel away challenge
one funnel away challenge
one funnel away challenge
one funnel away challenge
one funnel away challenge
one funnel away challenge
one funnel away challenge
one funnel away challenge

E Visa Turkey Cost said...

Aha, it's a good discussion about this paragraph at this place on this website, I read all of that, so now I'm commenting here too...Eligible travelers can obtain a Tourist visa to Turkey and pay the e Visa Turkey cost online by filling an online form with their personal details and passport information.

Azerbaijan visa said...

Thank you for this amazing post.. Wish to travel to Azerbaijan for business and tourism purpose then apply for Azerbaijan visa online. That offers you fast and very secure process.

Ankit Rautela said...

I have read several blogs of your blogs all are highly knowledgeable but this one is awesome

Social media basically plays vital role in branding services
digital marketing strategies
digital branding services agencey

kenya visa requirements for us citizens said...

Keep up the work, great job! The Kenya government has introduced an online visa system that allows US citizens to obtain a visit visa electronically. Kenya visa requirements for US citizens can be checked online &, US citizens can now easily apply for kenya visa from their home or office.

visa extension india said...

Thanks for sharing excellent information. Keep sharing such useful information.. Visa extension India, Government of India has provided an easy-to-use method to apply for an Indian visa extension (FRRO Visa Extension) through a simple online application form.

Satta Matka said...

Thanks for the useful information which you shared through out the blog.
Satta Matka, Kalyan Panel Chart.



Anonymous said...


Looking for brandig specialst and content writing expert in Meerut?

Visit the profile of Simran Kapoor a leading content writing expert and Branding specialist in Meerut

Branding Specialist In Meerut
Best Content Writer in Meerut
Content writing expert in Meerut

Anonymous said...

Meet the best android app developer in Meerut...
Android App Developer in Meerut

SEO Expert in Meerut...
SEO Expert in Meerut

Social Media Marketing Expert in Meerut...
Social Media Expert in Meerut

Nigersaurus teeth said...


Multan Sultan vs Quetta Gladiators
.
Very nice and informative blog you have share I like your work.

Bala Ji said...

Please wright more blog and blog post like that for us. really nice required information & the things i never imagined and i would request, wright more blog and blog post like that for us. Thanks you once agian
birth certificate in gurgaon
Marriage registration in ghaziabad
Name change ad in newspaper punjab.
Marriage certificate in faridabad
marriage registration in gurgaon
Marriage registration noida
Name add in birth certificate
Marriage registration in gurgaon
Name change procedure in india
Marriage registration in gurgaon

Satta Matka Expert Forum said...

Satta Matka is kind of a gambling game or a lottery-based game which people play all over the world. We ratankhatri.net will provide you with the best services we can manage. We give appropriate results also and growing rapidly in the satta matka market. This is the best and amazing website for satta matka online.

India start issuing tourist visas again said...

Great Job! I really like your work, now let me tell you that India start issuing tourist visas again. Now foreign travelers can apply for a long term e visa.

Andre Van den berg said...

Thanks for sharing this great data. Your site is so cool. I enjoyed it a lot.what is medical visa in India? you can visit in India for medical purposes. you can apply for a medical visa India online via India e visa website.

Customer Service said...

Thank You for Providing Such insightful information. If someone is looking for the Quickbooks Customer Service Number in US.

Cambridge English Academy said...

Thanks for sharing this post found this post and liked it very much but did it.
If you want to know more related to this article then visit our website
Visit website =Best IELTS Coaching East Delhi

growing infotech said...

Thanks for sharing this post found this post and liked it very much but did it.
If you want to know more related to this article then visit our website
Visit website =Computer Classes in East Delhi

Sunny said...

Thank You for Providing Such insightful information. If someone is looking for the Azure Data Factory Training in Hyderabad

anshu said...


All your works of yours are actually so very beautiful because they actually share so much knowledge with everyone present here.

breekelly said...

uolo login page

Hopox65457 said...

adblock 360 claims to be an ad blocker, it has been flagged as a fake site that functions as adware. Despite its promise to block pop-up ads and other unwanted ads while browsing the internet and watching videos, including movies on YouTube, it fails to do so effectively.

shubhi pandey said...

Thanks for sharing this post. Tally Training in Pune

Feyom77251 said...

If you're a fan of live sports streaming and have a passion for keeping up with the latest NHL, Soccer, NFL, NBA, or MLB matches, streameast is a game-changer. The website offers an extensive collection of sports events, including the latest MLB, Soccer, NHL, NFL, and NBA matches, as well as F1, UFC, and Boxing.

iteducation said...

Thanks for sharing this post power bi course in pune 

Nivehij135 said...

elza energy app is a confirmed scam due to several reasons, including a poorly designed website and application, lack of information regarding the owner and founder, unavailability of registration details, insufficient contact information, absence of detailed work information, no disclosed office address, and false claims and promises made by the app.

breekelly said...

It also mentions which system component or application failed to cause the error. Microsoft Windows is vulnerable to this error code 0x0 0x0.

Krysler Gomes said...

Laqshya Institute of Skills Training is one of the pioneer institutes in the education sector having a practical approach to various industrial skills training requirements. Laqshya was founded in 2009 to promote Technical & Non Technical education in Maharashtra, covering a vast field of Software, IT & Non-IT. We provide both Online & Offline Training.

To know more you can visit our Website

rekha1989175 said...

Tirupati is a city in the south Indian state of Andhra Pradesh. It is located in the Chittoor district on the banks of the Tirumala hills. temples near tirupati within 100 kms It is also known as the "Spiritual Capital of Andhra Pradesh" due to its famous Venkateswara Temple. places to visit near tirupati within 100 km The city is also a major pilgrimage and tourism destination and houses many ancient temples and structures. It is home to a number of educational and research institutions, such as the Sri Venkateswara University, Sri Venkateswara Veterinary University, and the Indian Institute of Science Education and Research. It is also an important industrial and commercial center. The city has a rich cultural heritage and is known for its classical dance and music forms.
visit site:
Places to visit Near Tirupati within 100 km

schavan223 said...

Data Science is a Market Leading and most demanding certification course among all other IT Courses. Students have lots of opportunities after completing the Data Science Courses in Nagpur 

schavan223 said...

Nice post. Helpful and great. Keep Uploading these types of article. Java Courses in Kolhapur, Java Classes in Kolhapur and Java Training in Kolhapur is now available at IT Education Centre.

breekelly said...

In the ever-evolving landscape of digital entertainment, piracy remains a persistent challenge, fueled by platforms like TamilBlasters. However, by fostering a culture of ethical consumption and supporting legitimate channels for accessing content, we can collectively stem the tide of piracy and uphold the integrity of creative expression.

Gautam said...

Very nice and informative blog you have shared. I like your work. Azure Data Factory Training in Hyderabad