You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/windows-server/active-directory/failure-when-you-use-an-existing-computer-account-to-join-a-domain.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
-
title: Failure when you use an existing computer account to join a domain
2
+
title: Failure When You Use an Existing Computer Account to Join a Domain
3
3
description: Addresses the issue of failing to join a computer to a domain when an existing computer account with the same name already exists.
4
-
ms.date: 03/26/2025
4
+
ms.date: 03/27/2025
5
5
manager: dcscontentpm
6
6
audience: itpro
7
7
ms.topic: troubleshooting
@@ -14,9 +14,9 @@ ms.custom:
14
14
15
15
This article addresses the issue of failing to join a computer to a domain when an existing computer account with the same name already exists.
16
16
17
-
## Symptom
17
+
## Symptoms
18
18
19
-
When you try to use an existing computer account name to join a computer to a domain, the operation fails. And you receive the following error messages:
19
+
When you try to use an existing computer account name to join a computer to a domain, the operation fails and you receive the following error messages:
20
20
21
21
In the **Access work or school** page:
22
22
> Can't join this domain. Contact your IT admin for more info.
@@ -29,7 +29,7 @@ In **System Properties**:
29
29
30
30
### Netsetup.log
31
31
32
-
Review the following example of the Netsetup.log on a fully updated system.
32
+
Review the following example of the **Netsetup.log** on a fully updated system.
|0xaac|2732|NERR_AccountReuseBlockedByPolicy|An account with the same name exists in Active Directory. Re-using the account was blocked by security policy.|lmerr.h|
91
91
92
92
## Cause
93
93
94
-
Windows introduced extra protections with updates released on and after October 11, 2022. These protections intentionally prevent domain join operations from reusing an existing computer account in the target domain unless the following specific conditions are met:
94
+
Windows introduced additional protections with updates released on and after October 11, 2022. These protections intentionally prevent domain join operations from reusing an existing computer account in the target domain unless the following specific conditions are met:
95
95
96
96
- The user attempting the operation is the creator of the existing account.
97
-
- The computer was created by a member of domain administrators, enterprise administrators, or built-in administrators groups.
98
-
- The owner of the computer account object that is being reused is a member of the "Domain controller: Allow computer account reuse during domain join" Group Policy setting. This setting requires the installation of Windows updates released on or after March 14, 2023, on all member computers and domain controllers.
97
+
- The computer is created by a member of domain administrators, enterprise administrators, or built-in administrators groups.
98
+
- The owner of the computer account object that is being reused is a member of the **Domain controller: Allow computer account reuse during domain join** Group Policy setting. This setting requires the installation of Windows updates released on or after March 14, 2023, on all member computers and domain controllers.
99
99
100
100
## Resolution
101
101
102
102
To fix the issue, follow these steps:
103
103
104
104
1. Perform the join operation by using the same account that created the computer account in the target domain.
105
105
2. If the existing account is stale (unused), delete it before attempting to join the domain again.
106
-
3. Rename the computer and join using a different account that doesn't already exist.
106
+
3. Rename the computer and join the domain using a different account that doesn't exist.
107
107
4. If a trusted security principal owns the existing account, and an administrator wants to reuse the account, use the **Domain controller: Allow computer account re-use during domain join** Group Policy.
108
108
109
109
## Reference
110
110
111
-
For more information about domain join hardening changes, see [KB5020276—Netjoin: Domain join hardening changes](https://support.microsoft.com/topic/kb5020276-netjoin-domain-join-hardening-changes-2b65a0f3-1f4c-42ef-ac0f-1caaf421baf8)
111
+
For more information about domain join hardening changes, see [KB5020276—Netjoin: Domain join hardening changes](https://support.microsoft.com/topic/kb5020276-netjoin-domain-join-hardening-changes-2b65a0f3-1f4c-42ef-ac0f-1caaf421baf8).
0 commit comments