the trust relationship between this workstation and the primary domain failed

%3CLINGO-SUB%20id%3D%22lingo-sub-810639%22%20slang%3D%22en-US%22%3Ethe%20trust%20relationship%20between%20this%20workstation%20and%20the%20primary%20domain%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-810639%22%20slang%3D%22en-US%22%3E%3CP%3EServer%20OS%202012%20R2%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFollowing%20a%20month%20of%20server%20behaving%20the%20computer%20password%20sync%20(30day%20timer)%20seems%20to%20have%20run%20(checked%20the%20date%20modified%20on%20the%20AD%20computer%20object%20was%2030%20days%20prior)%26nbsp%3B%20Since%20this%20event%20I%20am%20unable%20to%20login%20using%20a%20domain%20account%20to%20the%20server).%26nbsp%3B%20Anyone%20seen%20this%20before%20where%20the%20password%20update%20process%20breaks%20the%20trust%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-810639%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-810976%22%20slang%3D%22en-US%22%3ERe%3A%20the%20trust%20relationship%20between%20this%20workstation%20and%20the%20primary%20domain%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-810976%22%20slang%3D%22en-US%22%3E%3CP%3EMight%20try%20disjoin%2C%20reboot%2C%20rejoin%20domain.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-812270%22%20slang%3D%22en-US%22%3ERe%3A%20the%20trust%20relationship%20between%20this%20workstation%20and%20the%20primary%20domain%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-812270%22%20slang%3D%22en-US%22%3E%3CP%3EYes%20that%20worked%20but%20would%20like%20to%20get%20to%20root%20cause%20if%20poss%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-812788%22%20slang%3D%22en-US%22%3ERe%3A%20the%20trust%20relationship%20between%20this%20workstation%20and%20the%20primary%20domain%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-812788%22%20slang%3D%22en-US%22%3E%3CP%3EThese%20ones%20might%20help.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Faskds%2F2009%2F02%2F15%2Fmachine-account-password-process-2%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Faskds%2F2009%2F02%2F15%2Fmachine-account-password-process-2%2F%3C%2FFONT%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F216393%2Fresetting-computer-accounts-in-windows%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F216393%2Fresetting-computer-accounts-in-windows%3C%2FFONT%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F3139921%2Fno-computer-account-for-trust-error-when-you-change-domain-account-pas%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F3139921%2Fno-computer-account-for-trust-error-when-you-change-domain-account-pas%3C%2FFONT%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-813244%22%20slang%3D%22en-US%22%3ERe%3A%20the%20trust%20relationship%20between%20this%20workstation%20and%20the%20primary%20domain%20failed%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-813244%22%20slang%3D%22en-US%22%3Ejust%20a%20quick%20question%3A%20did%20you%20use%20snapshots%20at%20the%20server%3F%3CBR%20%2F%3EBecause%20if%20you%20use%20snapshots%20and%20the%20machine%20passwords%20changed%20before%20you%20recover%20a%20snapshot%20that%20is%20definitively%20possible.%3CBR%20%2F%3E%3CBR%20%2F%3Ethe%20local%20machine%20password%20is%20different%20to%20the%20one%20in%20the%20AD%20then...%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Server OS 2012 R2

 

Following a month of server behaving the computer password sync (30day timer) seems to have run (checked the date modified on the AD computer object was 30 days prior)  Since this event I am unable to login using a domain account to the server).  Anyone seen this before where the password update process breaks the trust?

 

Thanks

4 Replies
Highlighted

Might try disjoin, reboot, rejoin domain.

 

 

Highlighted

Yes that worked but would like to get to root cause if poss

Highlighted
just a quick question: did you use snapshots at the server?
Because if you use snapshots and the machine passwords changed before you recover a snapshot that is definitively possible.

the local machine password is different to the one in the AD then...