How often does the machine account password get changed when you have joined a domain? Is there a way on the DC to force this to happen so I can see what actually takes place? Does winbindd get this command or is it only smbd that updates secrets.tdb?