Help! I Deleted A Computer In AD (Domain Rejoin)

Oh no!  You are probably hyperventilating.  Take a deep breath and proceed.

1. By deleting a computer in AD, you are removing the record of the local administrator password that is set up by LAPS.  This means you can't log into the PC as yourself (domain user) or the local administrator account.
   1. By some miracle, LAPS may not be installed or enabled on this computer.  Try logging in (RDP or CmRc Viewer) with the default (original) local admin credentials (10in password).  If that doesn't work, proceed to the next step.
2. Hopefully this computer is still live in Sophos Central.  Log into Sophos Central to verify.  If so, you can use the Live Response feature to access a Command Prompt.
3. Enter the following command to override LAPS and set a new/temporary local admin password:

net user [username] [password] (without the brackets)

e.g. net user administrator 123ABC!123ABC!

Feel free to use the 10in password.  If you try it only once, you will receive an error that it doesn't meet the necessary password requirements.  To override, simply enter the 10in password twice in a row.

Once it has been changed, you should be able to remotely log into the computer, either via RDP or CmRcViewer, as the local administrator account.

Once logged in, you can go to This PC --> Properties, then remove the computer from the domain (add to a workgroup), reboot, then log back in, add back to the ffl.net domain with you domain creds (also recommended to change the computer name, in case the PC was deleted very recently and the DCs have not all synced up to each other yet), then reboot.

*If prompted by DUO, use the ServiceAccountPassCodes Keepass (See in Admin Keepass password to log into) then enter Server Administrator password into DUO.

Computer should be back on the domain and ready to use.