prevent dublicate computer name

Question

HI dear expert

How to prevent Domain admin rejoin existing computer name ?

our DC never alert for dublicate computer name

Answer 1

Hi,

In active directory, you can't have two computer objects with same name.

When you disjoint a computer from domain or reset its computer object, the computer object will not be deleted and can be reused to rejoin the same or another computer with same name.

Please don't forget to mark helpful answer as accepted

Answer 2

our domain controller never prevented existing computer name and never alert for overwrite.

Answer 3

Hi,

You should have a alert like this one:

Can you share with us a screenshot about duplicate account ?

Please don't forget to mark helpful answer as accepted

Answer 4

Hello there,

You can add the extra security policies.

These additional security checks are done before attempting to join the computer. If the checks are successful, the rest of the join operation is subject to Active Directory permissions as before.

Netjoin: Domain join hardening changes https://support.microsoft.com/en-gb/topic/kb5020276-netjoin-domain-join-hardening-changes-2b65a0f3-1f4c-42ef-ac0f-1caaf421baf8

Similar discussion here https://social.technet.microsoft.com/Forums/windowsserver/en-US/6ca18455-a583-4a22-841b-0e6ba586ea7c/join-domain-overwrites-existing-computer-name?forum=winserverDS

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--