Standalone backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)
Post Reply
WinstonWolf
Veteran
Posts: 284
Liked: 11 times
Joined: Jan 06, 2011 8:33 am
Contact:

Best way to add an recovered Windows Computer back in Domain ?

Post by WinstonWolf »

Hi i need an "How to " when i want to add an recovered Windows Computer back in Domain .

Our Case is as followed :

1. The actual Windows Computer crash ( Hardware or Software )
2. The Backup will be restored on an Standby Hardware.
3. The Computername from the old ( crashed ) Computer was in Active Directory.
4. The new ( from Restore ) created Computer comes again with an "registered in Domnain" Account .

What is here the best Way to handle it ?

Thanks
Michael
HannesK
Product Manager
Posts: 14840
Liked: 3086 times
Joined: Sep 01, 2014 11:46 am
Full Name: Hannes Kasparick
Location: Austria
Contact:

Re: Best way to add an recovered Windows Computer back in Domain ?

Post by HannesK »

Hello,
if you recover with bare metal recovery, then the name is the same. So not sure about the scenario of the questions.

If the computer password (in AD) changed, then you could also re-join the domain.

Best regards,
Hannes
marcofabbri
Influencer
Posts: 15
Liked: 2 times
Joined: Dec 10, 2021 7:59 am
Full Name: Marco Fabbri
Contact:

Re: Best way to add an recovered Windows Computer back in Domain ?

Post by marcofabbri »

Has Hannes says, if you do a baremetal recovery PC's got same ID in network for the AD, so it'll go direct in domain again (the word "again" is wrong, from PC perspective it was in network as always).
You can't put a PC with same name as for the old pC in AD without first rename/delete the old one.
And of course this is the how-to:
https://helpcenter.veeam.com/docs/agent ... tml?ver=50
WinstonWolf
Veteran
Posts: 284
Liked: 11 times
Joined: Jan 06, 2011 8:33 am
Contact:

Re: Best way to add an recovered Windows Computer back in Domain ?

Post by WinstonWolf »

@macrofabbri
Thanks i found this Dokument too , but there is no word about the Domain ( Join ) functionality after baremetal Recovery .

Means , when i do an Baremetal Recovery i put on the recovered PC and he should logon in AD like the old one with the same Name ( which was gone before )

Its the sense from an Recovery that the recovered PC has the same Name as the PC which was gone before .
Then i have first to delete the old Computer Object in AD and the i rejon the recovered PC in AD ? Right ?

Thanks
HannesK
Product Manager
Posts: 14840
Liked: 3086 times
Joined: Sep 01, 2014 11:46 am
Full Name: Hannes Kasparick
Location: Austria
Contact:

Re: Best way to add an recovered Windows Computer back in Domain ?

Post by HannesK »

no... just restore and it's fine :-)

except for the case when the computer password changed in between.
marcofabbri
Influencer
Posts: 15
Liked: 2 times
Joined: Dec 10, 2021 7:59 am
Full Name: Marco Fabbri
Contact:

Re: Best way to add an recovered Windows Computer back in Domain ?

Post by marcofabbri »

mmm i think even if he changed the password on startup PC will sync with domain and "download" new password credential. :)
Mildur
Product Manager
Posts: 9848
Liked: 2607 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Best way to add an recovered Windows Computer back in Domain ?

Post by Mildur » 2 people like this post

mmm i think even if he changed the password on startup PC will sync with domain and "download" new password credential.
Marco, the computer password is autogenerated.

Imagine this:

December 10. —> Backup was done
December 11. —> Computer Password was auto changed by the active directory
December 13. —> you are doing a bare metal recovery with the restore point from Dez 10.

Now you have the situation, that the restored computer has the old computer password in his config, but the active directory is expecting the new computer password from the December 13.
Your restored computer cannot etablish a trusted connection/relationship with the ad controller. So there is no sync of any password.

The only thing you can do:
1) reset the computer account in the ad
2) rejoin the restored computer to the active directory

Only then, the computer will get an updated Computer password from the ad controller.
Product Management Analyst @ Veeam Software
Post Reply

Who is online

Users browsing this forum: No registered users and 19 guests