Home

The security database on the server does not have a computer account for this workstation trust..

%3CLINGO-SUB%20id%3D%22lingo-sub-89545%22%20slang%3D%22en-US%22%3EThe%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust..%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-89545%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20a%20single%20Site%20single%20Domain%20(xyz.com)%20which%20contain%26nbsp%3Bfollowing%203%20Domain%20Controllers%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1-%20DC1%20(PDC%2C%20windows%20server%202012%20R2%2C%20a%20hyper-v%20virtual%26nbsp%3Bserver)%3C%2FP%3E%3CP%3E2-%20DC2%20(Secondary%20DC%2C%20windows%20server%20Ent%202008%20sp2%2C%20physical%20server)%3C%2FP%3E%3CP%3E3-%20DC3%20(Secondary%20DC%2C%26nbsp%3B%3CSPAN%3Ewindows%20server%20Ent%202008%20sp2%2C%20a%20vmware%20virtual%20server)%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CU%3E%3CSTRONG%3EProblem%3A%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EThe%20error%20message%26nbsp%3B%3CSTRONG%3E%3CEM%3E%22The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust%20relationship%22%3C%2FEM%3E%3C%2FSTRONG%3E%20is%20coming%20while%20end%20users%20attempting%20to%20change%20their%20password%20who%20are%20controlled%20by%20a%20domain%20password%20policy.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CU%3E%3CSTRONG%3EAction%20Taken%3A%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%3CP%3E%3CU%3E%3CSTRONG%3E1%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EWhen%20i%20chech%20the%20computer%20account%2C%20i%20found%20following%20result%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EC%3A%5CWindows%5Csystem32%26gt%3B%20NETDOM%20VERIFY%26nbsp%3B%3CSTRONG%3E%3CEM%3Ecomputer_name%3C%2FEM%3E%3C%2FSTRONG%3E%3CBR%20%2F%3EThe%20secure%20channel%20from%20%3CSTRONG%3E%3CEM%3Ecomputer_name%3C%2FEM%3E%3C%2FSTRONG%3E%20to%20the%20domain%20XYZ%26nbsp%3Bhas%20been%20verified.%20The%20connection%20is%20with%20the%20machine%20%3CSTRONG%3E%5C%5CDC3.xyz.com%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CU%3E%3CSTRONG%3E2%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EThen%20i%20do%20force%20to%20RESET%20the%20secure%20channel%20to%20DC1%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EC%3A%5CWindows%5Csystem32%26gt%3B%20NETDOM%20RESET%20%3CEM%3Ecomputer_name%26nbsp%3B%3C%2FEM%3E%2Fdomain%3Axyz%20%2Fserver%3A%3CSTRONG%3EDC1%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CU%3E%3CSTRONG%3E3%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EAfter%20restart%20the%20computer%2C%20user%20able%20to%20change%20without%20any%20error%20message!!!%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CU%3E%3CSTRONG%3ENow%20My%20Question%20is%3A%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%3CP%3EWhy%20the%20error%20message%26nbsp%3B%3CSTRONG%3E%3CEM%3E%22The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust%20relationship%22%26nbsp%3B%3C%2FEM%3E%3C%2FSTRONG%3Eappear%20while%20those%20computer's%20secure%20channel%20is%20connected%20to%20DC2%2FDC3%20only%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhy%20those%20client%20computer's%20%3CSTRONG%3ESecure%20Channel%3C%2FSTRONG%3E%20is%20automatically%20registered%20to%20either%20%3CSTRONG%3EDC2%3C%2FSTRONG%3E%20or%20%3CSTRONG%3EDC3%3C%2FSTRONG%3E%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-89545%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-378742%22%20slang%3D%22en-US%22%3ERe%3A%20The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-378742%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20pretty%20good%20to%20me%20although%20there%20are%20some%20system%20event%20log%20issues%20to%20look%20into%20on%26nbsp%3B%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EZAHRANIDC2%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-378239%22%20slang%3D%22en-US%22%3ERe%3A%20The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-378239%22%20slang%3D%22en-US%22%3E%3CP%3ERegard%20cmd%20%22%3CFONT%3E%3CSTRONG%3Eipconfig%20%2Fall%20%26gt%3B%20C%3A%5Cproblemworkstation.txt%2C%20%3C%2FSTRONG%3Ecurrently%20i%20do%20not%20have%20any%20problemworkstation.%20i%20will%20send%20the%20result%20as%20soon%20as%20i%20got%20one.%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%22%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-378207%22%20slang%3D%22en-US%22%3ERe%3A%20The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-378207%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Falzahraniholding-my.sharepoint.com%2F%3Au%3A%2Fg%2Fpersonal%2Fmullah_alzahrani_com_sa%2FEXVpOruXjO1JhoIMI2BMhScBh4a1MxPluZXwJ5haAUbIFg%3Fe%3DweRPFr%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Falzahraniholding-my.sharepoint.com%2F%3Au%3A%2Fg%2Fpersonal%2Fmullah_alzahrani_com_sa%2FEXVpOruXjO1JhoIMI2BMhScBh4a1MxPluZXwJ5haAUbIFg%3Fe%3DweRPFr%3C%2FA%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-377623%22%20slang%3D%22en-US%22%3ERe%3A%20The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-377623%22%20slang%3D%22en-US%22%3E%3CP%3EI'd%20agree%2C%20I'd%20check%20health%20and%20replication%20are%20100%25%20using%20(dcdiag%20%2F%20repadmin)%20tools.%20If%20you%20wanted%20some%20help%20then%20p%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Elease%20run%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EDcdiag%20%2Fv%20%2Fc%20%2Fd%20%2Fe%20%2Fs%3ADCName%20%26gt%3Bc%3A%5Cdcdiag.log%20(please%20replace%20DCName%20with%20your%20domain%20controller's%20netbios%20name)%3C%2FFONT%3E%3C%2FLI%3E%0A%3CLI%3E%3CSTRONG%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Erepadmin%20%2Fshowrepl%20%26gt%3BC%3A%5Crepl.txt%3C%2FFONT%3E%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CSTRONG%3Eipconfig%20%2Fall%20%26gt%3B%20C%3A%5Cdc1.txt%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FLI%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CSTRONG%3Eipconfig%20%2Fall%20%26gt%3B%20C%3A%5Cdc2.txt%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FLI%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CSTRONG%3Eipconfig%20%2Fall%20%26gt%3B%20C%3A%5Cdc3.txt%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FLI%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CSTRONG%3Eipconfig%20%2Fall%20%26gt%3B%20C%3A%5Cproblemworkstation.txt%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CDIV%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CBR%20%2F%3Ethen%20put%20files%20up%20on%20%3CU%3E%3CA%20href%3D%22https%3A%2F%2Fonedrive.live.com%2Fabout%2Fen-us%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EOneDrive%3C%2FA%3E%3C%2FU%3E%20and%20share%20a%20link.%3C%2FFONT%3E%3C%2FDIV%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-377606%22%20slang%3D%22en-US%22%3ERe%3A%20The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-377606%22%20slang%3D%22en-US%22%3E%3CP%3EPerhaps%20you%20could%20try%20disconnecting%20the%20Ethernet%20cable%20then%20input%20your%20user%20credentials%20again%20and%20then%20plug%20in%20the%20Ethernet%20cable%20back%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F60037%22%20target%3D%22_blank%22%3E%40Mohammed%20Ullah%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-90616%22%20slang%3D%22en-US%22%3ERe%3A%20The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-90616%22%20slang%3D%22en-US%22%3E%3CP%3EMohammed%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESounds%20like%20a%20replication%20issue.%20%26nbsp%3BI%20would%20Stop%20and%20then%20force%20replication.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-89907%22%20slang%3D%22en-US%22%3ERe%3A%20The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-89907%22%20slang%3D%22en-US%22%3EThanks%20for%20your%20reply.%20But%20the%20link%20doesn't%20helped%20me.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-89589%22%20slang%3D%22en-US%22%3ERe%3A%20The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-89589%22%20slang%3D%22en-US%22%3E%3CP%3ECould%20be%20a%20firewall%20issue%2C%20could%20be%20a%20replication%20issue%2C%20could%20be%20a%20configuration%20issue.%20Have%20a%20look%20at%20the%20following%20article%20with%20suggestions%20on%20how%20to%20resolve%20either%20of%20those%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechnet.microsoft.com%2Fnl-nl%2Flibrary%2Fee849847(v%3Dws.10).aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EError%3A%20The%20security%20database%20on%20the%20server%20does%20not%20have%20a%20computer%20account%20for%20this%20workstation%20trust%20relationship%3C%2FA%3E%3C%2FP%3E%3CP%3ELet%20me%20know%20if%20that%20helps%20you%2C%20or%20what%20issues%20you%20could%20identify%20by%20using%20that%20article.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EKind%20regards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJaap%20Brasser%3C%2FP%3E%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fwww.jaapbrasser.com%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ejaapbrasser.com%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Mohammed Ullah
Occasional Contributor

We have a single Site single Domain (xyz.com) which contain following 3 Domain Controllers:

 

1- DC1 (PDC, windows server 2012 R2, a hyper-v virtual server)

2- DC2 (Secondary DC, windows server Ent 2008 sp2, physical server)

3- DC3 (Secondary DC, windows server Ent 2008 sp2, a vmware virtual server)

 

Problem:

The error message "The security database on the server does not have a computer account for this workstation trust relationship" is coming while end users attempting to change their password who are controlled by a domain password policy.

 

Action Taken:

1

When i chech the computer account, i found following result:

C:\Windows\system32> NETDOM VERIFY computer_name
The secure channel from computer_name to the domain XYZ has been verified. The connection is with the machine \\DC3.xyz.com

 

2

Then i do force to RESET the secure channel to DC1:

C:\Windows\system32> NETDOM RESET computer_name /domain:xyz /server:DC1

 

3

After restart the computer, user able to change without any error message!!!

 

Now My Question is:

Why the error message "The security database on the server does not have a computer account for this workstation trust relationship" appear while those computer's secure channel is connected to DC2/DC3 only?

 

Why those client computer's Secure Channel is automatically registered to either DC2 or DC3?

8 Replies

Could be a firewall issue, could be a replication issue, could be a configuration issue. Have a look at the following article with suggestions on how to resolve either of those:

Error: The security database on the server does not have a computer account for this workstation tru...

Let me know if that helps you, or what issues you could identify by using that article.

 

 

Kind regards,

 

Jaap Brasser

jaapbrasser.com

 

Thanks for your reply. But the link doesn't helped me.

Mohammed

 

Sounds like a replication issue.  I would Stop and then force replication. 

Perhaps you could try disconnecting the Ethernet cable then input your user credentials again and then plug in the Ethernet cable back@Mohammed Ullah 

I'd agree, I'd check health and replication are 100% using (dcdiag / repadmin) tools. If you wanted some help then please run;

  • Dcdiag /v /c /d /e /s:DCName >c:\dcdiag.log
    (please replace DCName with your domain controller's netbios name)
  • repadmin /showrepl >C:\repl.txt
  • ipconfig /all > C:\dc1.txt
  • ipconfig /all > C:\dc2.txt
  • ipconfig /all > C:\dc3.txt
  • ipconfig /all > C:\problemworkstation.txt

then put files up on OneDrive and share a link.

 

 

 

Regard cmd "ipconfig /all > C:\problemworkstation.txt, currently i do not have any problemworkstation. i will send the result as soon as i got one.

"@Dave Patrick 

Looks pretty good to me although there are some system event log issues to look into on ZAHRANIDC2

 

 

 

Related Conversations
Extentions Synchronization
Deleted in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
36 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies