KB11548 - What happens if we manually delete the PCS machine account from Active Directory domain controller

What happens if we manually delete the PCS machine account from Active Directory domain controller

During AD authentication, PCS joins the AD domain controller as a member.  This allows the PCS to obtain group information for all the authenticated users.

If the PCS machine account is manually deleted under "Active Directory Users/Computers", then PCS may takes up to 6 hours to re-join the domain controller and during this period all group lookups will fail.

We DO NOT recommend manually deleting the PCS machine account from AD console.  In the event that you delete this account manually restart the services on the PCS (Admin GUI > Maintenance > Restart Services) to ensure Active Directory based authentication and authorization services work as configured.