An account with the same name exists in Active Directory. Re-using the account was blocked by security policy. (4373025)

When attempting to perform a domain join where you have pre-created the computer accounts in the target domain, or when a computer tries to rejoin the source domain during a rollback event, the following error is encountered:
An account with the same name exists in Active Directory. Re-using the account was blocked by security policy.
 

1. The user attempting the operation is the creator of the existing account.
2. The computer account was created by a member of domain administrators.
3. The owner of the computer account that is being reused is a member of the "Domain controller: Allow computer account re-use during domain join." Group Policy setting.

1. Install the March 14, 2023, updates on all member computers and domain controllers
2. Configure the new group policy setting
   1. Open the following policy for editing: Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Domain controller: Allow computer account re-use during domain join
   2. Select Define this policy setting and <Edit Security…>
   3. Add users or groups to the Allow permission
      1. Add the accounts that pre-created the computer accounts in Active Directory
3. If you previously enabled the NetJoinLegacyAccountReuse registry key, disable it on the member computer by deleting the key or setting the value to 0
   1. HKLM\System\CurrentControlSet\Control\LSA\NetJoinLegacyAccountReuse