Active Directory Administration Cookbook

How it works...

By resetting the secure channel for a device, the secret that is stored in Active Directory as an attribute to the computer object and on the device as an LSA secret is changed at both sides.

Another way to reset the secure channel is to remove the device from the Active Directory domain, delete the corresponding computer object, and then rejoin the device to the domain. As this is more time-consuming and requires more effort, resetting the secure channel should be the preferred method.

Using Active Directory Users and Computers, the Active Directory Administrative Center, or the command line in this recipe, the secret in Active Directory is changed. After this change, the device will need to be rejoined to the domain. The ...