Active Directory Administration Cookbook

Getting ready

To reset a computer object's secret in the Active Directory object, privileges are needed to allow you to change the computer object. By default, Domain Admins and Account Operators have this privilege. When using the Windows PowerShell method on the device itself, an account is needed that has local administrative privileges on the device and the privileges mentioned previously.

To reset the secure channel, the device needs to be on the same logical networks as at least one of the domain controllers. You might be able to rename a device when connected through a VPN connection—when the required traffic is allowed through.

When a specific domain controller is specified, make sure the Netlogon service is running.