When re-building a PC via Operating System Installation Management (OSIM) it fails to join the domain during the build process.

Products

• CA Client Automation - IT Client Manager
• CA Client Automation

Issue/Introduction

• When re-building a PC via Operating System Installation Management (OSIM) it fails to join the domain during the build process.
• This computer already has an account present in Active Directory.
• The credentials supplied have been checked and are correct.
• If the existing computer account is removed from the domain then the join works with no issues.

Environment

Client Automation (ITCM) -- All versions

Cause

The permissions of the account supplied, whilst sufficient to add a new computer to Active Directory, are insufficient to replace an already existing computer account with another of the same name.

Resolution

• Add the permissions as per this MS article to the users being used to join the computer to the domain:

Error: Access is denied when non-administrator users who have been delegated control try to join computers to a domain controller

• By default the Domain Administrators have these permissions.