Koozali.org: home of the SME Server

[SOLVED] machine joining domain = account already exists

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
[SOLVED] machine joining domain = account already exists
« on: January 10, 2023, 04:08:39 PM »
I 've to replace a HDD (by a new SSD) in a SME9 domain and was unable to join the same machine to domain.
Always complain about account exist and seurity police forbid it!
So I found this info = https://support.microsoft.com/en-gb/topic/kb5020276-netjoin-domain-join-hardening-changes-2b65a0f3-1f4c-42ef-ac0f-1caaf421baf8
about to add on registry:
Code: [Select]
Path: HKLM\System\CurrentControlSet\Control\LSA
Type: REG_DWORD (32)
Name: NetJoinLegacyAccountReuse
Value: 1

Maybe this registry hack can be merged to win10smb.reg or could we create a new .reg for it (or just update some documentation page).
I'm aware I'm no using SME10 so I'm not sure if it's still applies (I'd bet it does!).
« Last Edit: January 11, 2023, 08:14:51 AM by Jáder »
...

Offline Jean-Philippe Pialasse

  • *
  • 2,762
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: machine joining domain = account already exists
« Reply #1 on: January 10, 2023, 07:12:50 PM »
raise a bug

Offline bunkobugsy

  • *
  • 279
  • +4/-0
Re: machine joining domain = account already exists
« Reply #2 on: January 10, 2023, 08:39:44 PM »
Already merged for SME10, reapply latest patch from IP/server-resources/regedit/win10samba.reg, reboot and join again.

https://bugs.koozali.org/show_bug.cgi?id=12231 fixed in e-smith-samba-2_6_0-27_el7_sme

https://wiki.koozali.org/Windows_10_Support#Windows_10_and_Windows_11_issues_joining_domains
« Last Edit: January 11, 2023, 07:43:15 AM by bunkobugsy »