A quick way to add domains to a computers Local intranet zone is to run the following regs in cmd. No Admin rights needed.
REG ADD “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\office.com ” /v https /t REG_DWORD /d 1 /f
REG ADD “HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoftonline.com ” /v https /t REG_DWORD /d 1 /f
So, your computers domain account has gone bad. And you know that the way to fix this is to leave the domain and rejoin. Well don’t.
Here is how you ca fix this with one command + one reboot:
netdom.exe resetpwd /s: /ud: /pd:*
If your machine is a domain controller then here is how you fix this:
Turn off the Kerberos Key Distribution Center service. You can do this in the Services MMC snap-in. Set the startup type to Manual. Reboot.
Remove the Kerberos ticket cache. A reboot will do this for you, or you can remove them using KerbTray.exe. You can get that tool here: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=17657
Post change steps. Do these in conjunction with 5 below. Turn the Kerberos Key Distribution Center Service back on before rebooting. You should reboot the domain controller and then force replication in the Active Directory Sites and Services MMC snap-in.
Run netdom.exe to change the password.
Open an administrative command prompt. On Windows platforms with UAC enabled, you will need to right-click on cmd.exe and select “run as Administrator”.
Type the following command: netdom.exe resetpwd /s: /ud: /pd:*
Reboot the machine.
Source and a great Blog.
Run: Import-module ActiveDirectory
Run: (Get-ADGroupMember -Identity “GROUPNAME”).count (replace GROUPNAME with the group you want to count)