How to backup Computer Account connected to a domain.

Discussion in 'Windows 10' started by digitalbear, Jul 8, 2015.

  1. digitalbear

    digitalbear MDL Member

    Oct 23, 2012
    121
    15
    10
    I have posted this on the win7 thread, but this is related to all versions including 10 and all the users is here due to obvious reasons.

    Currently running a Windows 7/8/(10) Enterprise at work that is connected to a domain.


    It is a desktop PC and it is giving me all sorts of issues that requires a fresh install, I can reinstall the machine by myself without asking our IT department & safe a lot of time, but then IT still needs to connect it to the domain - Is there any way to extract/save it's domain account (from the local pc, no access to DC) to be restored when finished, saving & restoring the SAM reg file does not work.

    Maybe one can use djoin.exe to export it's account and restore it afterwards ?
     
  2. MS_User

    MS_User MDL Guru

    Nov 30, 2014
    4,629
    1,343
    150
    i believe u cant even if u back up your cashed credentials, once u wipe HD and re-install windows your computer SID changes so your backup credential would not work....u can give it a try heres were u can find it to back it up.

    GPO_name\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
     
  3. digitalbear

    digitalbear MDL Member

    Oct 23, 2012
    121
    15
    10
    Thank you Ms_User - If I back up the old sid number and just restore it - there is a lot of tools that can do it ?
     
  4. digitalbear

    digitalbear MDL Member

    Oct 23, 2012
    121
    15
    10
    Ok so maybe it is better to just to do a windows 7 refresh, in stead of reinstall - question is will this refresh also wipe the domain account fom the local pc ?
     
  5. MS_User

    MS_User MDL Guru

    Nov 30, 2014
    4,629
    1,343
    150
    yes a refresh will not wipe out your local user settings.....but i will back it up just to be safe.
     
  6. MrMagic

    MrMagic MDL Guru

    Feb 13, 2012
    6,015
    4,148
    210
    Domain credentials aren't stored on the local machine anyway are they? Stored on the DC iirc
     
  7. MS_User

    MS_User MDL Guru

    Nov 30, 2014
    4,629
    1,343
    150
    the cashed credentials are their.
     
  8. MrMagic

    MrMagic MDL Guru

    Feb 13, 2012
    6,015
    4,148
    210
    You sure? Doesn't sound very 'domain safe'
     
  9. MS_User

    MS_User MDL Guru

    Nov 30, 2014
    4,629
    1,343
    150
    is just a log in token....your credentials are in the DC. is only their so when the srv is down u can still log in as a stand alone node.
     
  10. MrMagic

    MrMagic MDL Guru

    Feb 13, 2012
    6,015
    4,148
    210
    Ah right, gotcha, yea I was thinking it would be a bit insecure if the full credentials were stored locally :)