Windows 10: After implementing KB5020276 March,16 I'm still not able to re-join the PC to the domain

Hello,I've proceeded step by step with all instructions regarding KB5020276:Install March,16 updates on all Domain ControllerInstall March,16 updates on the test workstationSet up new GPO setting as per documentation - settings taken by all DCsEnsured that NetJoinLegacyAccountReuse was not set in the registryBut still, I'm getting the error that accounts re-use is blocked by the security policyI've also checked NetSetup.log file and the output is quite strange:IsLegacyAccountReuseSetInRegistry: RegQueryValueEx for 'NetJoinLegacyAccountReuse' returned Status: 0x2.IsLegacyAccountReuseSetInRegist

:)

 

Active Directory - Joining With Preexisting Computer Object (Post KB5020276)

With KB5020276, our team members are no longer able to join objects to the domain that were created by privileged team members.

We have two groups: 'Admins' and 'Technicians', our Admins have permission to create Computer objects, and will create preexisting computer objects in the proper OU's, adding the Technicians group to the 'User or Group' that 'can join this computer to a domain'. When imaging, our Technicians will join the computer to the domain. However, with the KB5020276 update, now only the creator of the OU is currently able to join the computer.

Is there an additional setting necessary so our techs can join computers to the domain?

 

Join Workplace on Domain PC

Hi Harish,



Thank you for writing to Microsoft Community Forums.



We understand that the domain joined computer is prompting a notification related to Workplace Join. In this case, let me help to point you in the right direction where you should get the appropriate assistance for issues related to domain environment.



I would suggest you to post your query in
TechNet Forums, where we have a dedicated team of professionals to help you with queries related to Workplace Join.



Meanwhile, if it may help, you can check the following documents.

• Walkthrough: Workplace Join with a Windows Device
  
• Join
  to Workplace from Any Device for SSO and Seamless Second Factor Authentication Across Company Applications
  
• How To: Plan your hybrid Azure Active Directory join implementation
  

Regards,

Prakhar Khare

Microsoft Community – Moderator

 

Join Windows 10 PC to a Domain  


@rseiler,

I just finished clean installing Windows 10 Enterprise build 17093 in a VM using a local account, and it still has the same steps in the tutorial for me.

Is your PC already joined to a domain?