When a computer account is reset in the Active Directory, what happens?

Question

I know the question was posed before, but the answers haven't been satisfying at all.
What is the difference between reseting and rejoining?
Is the SID deleted?
When is advisible to reset the account instead of deleting and rejoining?

- sorry for my "it"-key not working.

Answer 1

Resetting the computer account maintains the computer object as is but resets the computer account password.The domain and the computer actually share a password and resetting it makes the password in the domain different, just as if you were to reset a user password without telling the user. The computer must be rejoined to the domain for it to communicate successfully.

The computer can now rejoined to the domain and will use the same computer account object. This means the computer sid will be maintained and in the case of Active Directory utilizing Dynamic Dns this is important since the DNS record will be per-missioned with the computer account SID. Also, group memberships will be maintained and any per-missioning done using the computer object.

Deleting and rejoining creates a completely new object. New SID in default OU without any of the old group memberships or permissions.

Answer 2

This Site Might Help You.

RE:
When a computer account is reset in the Active Directory, what happens?
I know the question was posed before, but the answers haven't been satisfying at all.
What is the difference between reseting and rejoining?
Is the SID deleted?
When is advisible to reset the account instead of deleting and rejoining?

Answer 3

Reset Computer Account

Answer 4

you only reset the account when it locked out or the password expired, but you dont need to rejoin it to the domain unless it was completely removed. the point is that you can do as many changes as you want without removing it from active directory.