active directory and sid

make sure your "Computer ID" is different between machines. Under Tiger, this field gets autopopulated based on Computer Name, which may be the same since you cloned the machine.

See https://www.cs.uwaterloo.ca/twiki/view/CF/ADMacInteg about SID and AD/OD.

"You are almost ready to manage any Macintosh client terminals that are bound to the Open Directory realm. However, unlike the case for Active Directory users and groups, Open Directory can not use the computer information derived from Active Directory to populate a new or existing computer list. This is due to Macintosh Open Directory utilizing client terminal ethernet addresses to uniquely identify a terminal. Active Directory retains no such information about clients and relies on a Microsoft specific SID number instead. Neither form of identification is convertable to the other.
Therefore computer list entries must be handled manually (or using a script) where the terminal name and ethernet card address are entered into the Open Directory. To avoid confusion, a terminal's name in the Open Directory should NOT be the same as the same terminal's name in the Active Directory."

I have two separate macs.. i used carbon copy cloner
to clone the golden image (not bound to AD)

i deployed that to 2 boxes.. however if i join box A
to AD.. when i try to join box B it wants to join the
existing computer account for box A.

how can you regenerate the SID on the os x box
(10.4.8 intel) or any version there of.

i know with XP and lower you can use windows sysprep.
Any similar tool or shell command to run to complete
this?

MacBook Pro Mac OS X (10.4.9)