Skip to content

Commit 8538056

Browse files
authored
Update troubleshoot-vm-configuration.md
Adding information related to computer account reuse due to recent changes in Windows Server
1 parent d9c32bf commit 8538056

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

articles/virtual-desktop/troubleshoot-vm-configuration.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,17 @@ Follow these instructions if you're having issues joining virtual machines (VMs)
7070
- Change the network interface's DNS server settings to **Custom** with the steps from [Change DNS servers](../virtual-network/virtual-network-network-interface.md#change-dns-servers) and specify the private IP addresses of the DNS servers on the virtual network.
7171
- Change the network interface's DNS server settings to **Inherit from virtual network** with the steps from [Change DNS servers](../virtual-network/virtual-network-network-interface.md#change-dns-servers), then change the virtual network's DNS server settings with the steps from [Change DNS servers](../virtual-network/manage-virtual-network.yml#change-dns-servers).
7272

73+
### Error: Computer account reuse is blocked by policy
74+
75+
**Cause:** You are attempting to reuse a computer account (host name), have applied Windows updates released on and after October 11, 2022 and the user account provided for the domain does not have sufficient permissions to reuse computer accounts.
76+
77+
**Fix:** Take one of the following actions to resolve.
78+
- Use the same user account that was used to create the existing computer account object
79+
- Use an account that is a member of domain administrators
80+
- Use an account that is a member of the “Domain controller: Allow computer account re-use during domain join.” Group Policy setting. This setting requires the installation of Windows updates released on or after March 14, 2023, on ALL member computers and domain controllers.
81+
82+
[Review additional guidance](https://support.microsoft.com/en-us/topic/kb5020276-netjoin-domain-join-hardening-changes-2b65a0f3-1f4c-42ef-ac0f-1caaf421baf8) for more information on the permissions changes for computer account reuse.
83+
7384
## Azure Virtual Desktop Agent and Azure Virtual Desktop Boot Loader aren't installed
7485

7586
The recommended way to provision VMs is using the Azure portal creation template. The template automatically installs the Azure Virtual Desktop Agent and Azure Virtual Desktop Agent Boot Loader.

0 commit comments

Comments
 (0)