Unable to add machines to an existing catalog with error "Failed to add computer account because it is locked

book

Article ID: CTX221398

calendar_today

Updated On:

Resolution

We at times may run into issues with adding machines to an existing catalog with the error: "Failed to add computer account because it is locked".
The following steps need to be followed to resolve the same: 

- Remove the account from the catalog identity pool using: Remove-AcctADAccount -IdentityPoolName xxx -AdAccountName xxx -Force 

- Remove the machine account from ADIdentity Pool. Check the start count for the identity pool by: Get-AcctIdentityPool -IdentityPoolName xxx. 

- Now re-import the account to the catalog from Studio and tried to add a machine. If it fails,

- Remove the AD account from the Domain Controller. Check if the ADAccount is removed from the pool. 

- Add the new machines again.

We should be able to add the machines successfully to the catalog.