How to Fix Primary Domain Trust Failures

Error:  

The trust relationship between this workstation and the primary domain failed.

Problem:  

Domain computers use internal passwords to authenticate with Active Directory (AD).  Servers and workstations automatically reset their passwords every 30 days.  Suspended virtual machines or server backups may not logon domain users if the computer has a new password in AD.

Solution:   

Fix domain trust issues: (1) in AD, and (2) on the computer.

  1.    Reset the computer account in Active Directory Users and Computers (ADUC). 

    Open ADUC → Computers OU → Right-Click on the computer → Reset Accout

  2.  Reset the computer with PowerShell.  N.B., This step requires local Administrative rights.  We can't reset the computer, or even re-join the domain, with out the ability to log on locally.

    From PowerShell:  Reset-ComputerMachinePassword 
That's It!

References:  http://technet.microsoft.com/en-us/library/hh849751.aspx

1 Comments

  1. netdom.exe resetpwd /s: /ud: /pd:*

    http://implbits.com/active-directory/2012/04/13/dont-rejoin-to-fix.html

    ReplyDelete

My Instagram