TopicWindows Server →
⌚ About 2 min read
Quickly determine whether a Windows computer is a member of an Active Directory domain.
Avant de commencer : adaptez toujours les commandes et manipulations à votre environnement. Sur un système de production, prévoyez une backup ou un retour arrière lorsque l’action peut modifier la configuration.
Étapes à suivre
-
1
Open Power Shell
Run Windows Terminal.
-
2
Asking the system.
Use the Well-Cim Instance Win32_Computer, 2003.
-
3
Read Part 11Domain.
The position is a member of a field.
-
4
Read Domain.
The domain property displays the domain name or working group.
Commands utiles
The result is that the system is not a good one.
À retenir
- Being attached to the domain does not guarantee that the position currently communicates with a domain controller.
- To diagnose the of approval relationship, use appropriate tools rather than immediately remove the position from the domain.
Domain join: DNS and secure channel are central to diagnosis
Technical checkpoints
- A domain-joined computer must resolve AD SRV records through domain DNS; using public DNS as primary breaks DC discovery.
- The secure channel is the computer-to-domain trust relationship and can be tested without immediately removing the computer from the domain.
- Time/Kerberos, the computer account and replication can produce similar symptoms.
Secure channel check
Check DC discovery and secure channel before considering a rejoin.
nltest /dsgetdc:example.local
Test-ComputerSecureChannel -VerboseTopic-specific pitfalls
- Leaving and rejoining the domain too early can hide the root cause and disrupt local profiles or secrets.
- Repairing against an out-of-sync DC can make the problem intermittent.
How to validate
- The secure channel returns True and DC discovery uses the expected site.
- Authentication and GPO