mbam keys and active directory issue during test

[ccshutts]

We are in the process of testing mbam deployment through both ods and pushing mbam client through sccm. We have the group policy set to store keys in AD, and it works..

 

A coworker ask me: what would happen if someone would delete the machine account in AD, and you had to re-join the workstation to the domain.. would it re-put the key in the new machine account?

 

answer: it doesn't appear to. Does anyone know why? or how to make it?

 

Thank you,

Chad

[anyweb]

why would someone delete the account from AD ? I havn't tested that scenario yet though...but if you simply run gpupdate /force won't it reapply the gpo's and do what you want ?

[thatsmyjam]

So ive tested it , for every new machine u get a new key but the old keys are still in the database!