Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Are there a combination of registry entries that a person could modify in order to modify the domain membership?

share|improve this question
    
What in the world are you trying to accomplish in the first place? –  surfasb Oct 19 '11 at 2:23
    
I am seeing some very strange behavior on some workstations (they all share the same image) and am basically interested in looking at what domain the computer "thinks" it is in. –  MattUebel Oct 19 '11 at 12:24
    
In that case you should check the event log. What kind of "strange behaviors" are you seeing? –  surfasb Oct 20 '11 at 1:30
    
thread at microsoft goes further for those interested bit.ly/qnQYVB –  MattUebel Oct 20 '11 at 12:34

2 Answers 2

TL;DR: No.

I don't think so but I don't know for sure.

Registry is local do the computer. AD is a policy generally contained in a database on a domain server that is pushed out ("enforced") to local workstations upon connection to the domain. Joining a domain involves a computer being assigned a set of policies that result in registry entries on the computer defining what it is supposed to do as part of that domain.

You can generally modify these registry entries, but they are usually reapplied at regular intervals and when the computer reconnects to the domain.

Because the AD settings are made on the controller and pushed to the workstation, they are generally one-way. Making changes in the registry will not result in those changes being pushed up into the domain policy.

Manual changes you make in the local group policy will be allowed to stay only if there is not explicit instructions otherwise coming from the controller.

share|improve this answer

According to your latest edit of the question:

...looking at what domain the computer "thinks" it is in...

On a command prompt enter:

echo %logonserver%
echo %userdomain%
echo %userdnsdomain%

This might answer your question. I'm not sure if this works if the computer is in some weird state.

Or in the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\CachedMachineNames

Value: NameUserPrincipal

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters

Several values contain the domain name

But to answer your original question: no, you can't change domain membership via registry only.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.