Forgot to sysprep, any hope left?

Posted by Ordinary_Setting_167@reddit | sysadmin | View on Reddit | 29 comments

When I created multiple terminal servers, I initially built one machine, joined it to the domain, installed all required applications, and then used Hyper-V export and import to duplicate it four times. During the import process, I selected the option to generate a new ID, as I assumed that would be sufficient. After importing, I changed the hostname and IP address on each server. At first, everything seemed to work fine. testusers could log in without any errors.

Recently, however, I started encountering login issues related to SID conflicts. That made me realize the root of the problem. I did not run Sysprep and create a proper golden image before cloning. That was my mistake. It has just been a while since I last had to deploy terminal servers.

Now I am trying to figure out the best way to correct this. I have read suggestions about taking one of the existing servers, removing it from the domain, running Sysprep, and then using that as a new base image. Unfortunately, that approach has not worked well so far. When I clone that VM, local accounts end up broken.

At this point, I am considering rebuilding the terminal server environment properly from scratch. Does anyone have recommendations or best practices for fixing this situation or setting it up cleanly going forward?