Description of Netdom.exe Syntax and Versions

You can use the Netdom.exe tool to reset the secure channel between a workstation, server, or domain controller. This article describes the syntax for variations that you can use with Netdom.exe.

When you use Netdom.exe, the operating system of the computer on which you are running the command determines the Netdom.exe version and syntax. The domain you are joining does not affect the Netdom.exe version and syntax.

• To run Netdom.exe from a Windows NT 4.0-based computer, use Netdom.exe version 1.8 and the Windows NT 4.0 syntax.
• To run Netdom.exe from a Microsoft Windows 2000-based computer, use Netdom.exe 2.0 and the Windows 2000 syntax.

Windows NT 4 (Netdom.exe 1.8)

Use the following syntax to join an Windows NT 4.0 member to Windows NT 4.0 or Windows 2000 domain:



NOTE: You do not have to restart your computer when you join from the command line. Log off and log back on to make the change.

For additional information about how to join a Windows NT 4.0 member to a Windows NT 4.0 or Windows 2000 domain, click the following article number to view the article in the Microsoft Knowledge Base: Use the following syntax to reset a Windows NT 4.0 member to a Windows NT 4.0 or Windows 2000 domain:



For additional information about how to reset a Windows NT 4.0 member to a Windows NT 4.0 or Windows 2000 domain, click the following article number to view the article in the Microsoft Knowledge Base: Use the following syntax to reset a Windows NT 4.0 backup domain controller (BDC) secure channel to a Windows NT 4.0 or Windows 2000 domain:



For additional information a related topic, click the following article number to view the article in the Microsoft Knowledge Base:

Windows 2000 (Netdom 2.0)

• Use the following syntax to reset a Windows 2000 member computer from a Windows NT 4.0 or Windows 2000 domain:
  
  
  netdom reset computer_name /domain:domain_name
  
  
  For additional information about how to reset a Windows 2000 member computer from a Windows NT 4.0 or Windows 2000 domain, click the following article number to view the article in the Microsoft Knowledge Base:
  216393  (http://support.microsoft.com/kb/216393/EN-US/ ) Resetting Computer Accounts in Windows 2000 and Windows XP
• Use the following syntax to reset a Windows 2000 member from a Windows 2000 domain controller:
  
  
  netdom reset computer_name /domain:domain_name /usero:local_admin /passwordo:*
  
  
  For additional information about how to reset a Windows 2000 member from a Windows 2000 domain controller, click the following article number to view the article in the Microsoft Knowledge Base:
  216393  (http://support.microsoft.com/kb/216393/EN-US/ ) Resetting Computer Accounts in Windows 2000 and Windows XP
• To reset a domain controller in a Windows 2000 domain:
  1. Stop the Kerberos Key Distribution Center (KDC) service, and then set it to Manual startup.
  2. Run the netdom resetpwd /server:replication_partner_server_name /userd:domain_name\admin_user /passwordd:* command.
  3. Restart the computer, start the KDC, and then set it back to Automatic startup.
  For additional information about how to reset a domain controller in a Windows 2000 domain, click the following article number to view the article in the Microsoft Knowledge Base:
  260575  (http://support.microsoft.com/kb/260575/EN-US/ ) HOW TO: Use Netdom.exe to Reset Machine Account Passwords of a Windows 2000 Domain Controller
• Use the following syntax to join a Windows 2000 member to a Windows NT 4.0 or Windows 2000 domain:
  
  
  netdom join computer_name /domain:domain_name /userd:domain_admin /passwordd:* /usero:local_admin /passwordo:*
  
  
  NOTE: You do not have to restart your computer when you join from the command line. Log off and log back on to make the change.
  
  For additional information about how to join a Windows 2000 member to a Windows NT 4.0 or Windows 2000 domain, click the following article number to view the article in the Microsoft Knowledge Base:
  266651  (http://support.microsoft.com/kb/266651/EN-US/ ) Using Netdom 2.0 to Create Computer Accounts on Admin-Specified Domain Controllers
• Use the following syntax to join a BDC to a Windows 2000 domain:
  1. netdom add computer_name /domain:domain_name /userd:domain_admin /passwordd:* /dc
  2. Install the operating system as a BDC in the Windows 2000 domain.

In some cases you may have a large number of computers you want to run Netdom.exe against.