This message was deleted.
# citrix-vads
Slackbot
03/15/2023, 6:32 PMThis message was deleted.
d
Danny
03/15/2023, 7:11 PMjust log in as a local account and run
Reset-ComputerMachinePassword -Server DomainControllerName -Credential domain\AdminAccount
💯 1
n
newbie1998
03/15/2023, 7:37 PMokay, so that won't impact the MCS clones when i run an update?
g
Geir Sandstad
03/16/2023, 9:18 AMNope.
Top tip... look into disabling automatic password update on the computer account, that is a registry setting which can be set inn the master image.
Geir Sandstad
03/16/2023, 9:20 AMThere are some security concerns involved of course, but you can avoid this issue later if you revert to an older snapshot with an invalid machine account password.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/disable-machine-account-password
r
Ray Davis
03/17/2023, 12:49 PMExactly what @Geir Sandstad said is what I do at times. Sometimes I have to do this as well
Copy code
Test-ComputerSecureChannel -Repair -Credential corpdsmithn
newbie1998
03/17/2023, 1:11 PM@Ray Davis thanks...i guess it won't impact the clones...thanks
g
Geir Sandstad
03/17/2023, 1:14 PMWhat @Ray Davis said will work as well when the problem arises. I've done that a few times with persistent VDIs that have lost the trust relationship. However, "my" fix should help you avoid that issue with the master image alltogether.
r
Ray Davis
03/17/2023, 1:25 PMNo @newbie1998 the clone have there own identity. But do what @Geir Sandstad stated with the machine account. If the master image is turned off, as most are while not in use. The Domain trust may continue to get broken. As I believe it is 30 days. It like we do with PVS Golden image.
https://support.citrix.com/article/CTX231620/disabling-automatic-password-change-for-nonpersistent-desktops
Ray Davis
03/17/2023, 1:25 PMuse that for the master image.
g
Geir Sandstad
03/17/2023, 1:50 PMCorrect, @Ray Davis
n
newbie1998
03/20/2023, 10:38 AMI tried all these steps but none of them worked. I checked AD and the computer account was missing. I've never seen that before. I thought a computer AD account loses it's trust if it has been shut down for longer than 30 days.
newbie1998
03/20/2023, 10:39 AMdoes it automatically get deleted from AD as well?
newbie1998
03/20/2023, 10:53 AMDo you really have to do this for MCS - https://support.citrix.com/article/CTX231620/disabling-automatic-password-change-for-nonpersistent-desktops