{"id":7388,"date":"2013-07-30T13:15:19","date_gmt":"2013-07-30T11:15:19","guid":{"rendered":"http:\/\/nolabnoparty.com\/?p=7388"},"modified":"2015-07-23T10:34:43","modified_gmt":"2015-07-23T08:34:43","slug":"trust-relationship-failed-workstation-domain","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/trust-relationship-failed-workstation-domain\/","title":{"rendered":"Trust relationship failed between Workstation and Domain"},"content":{"rendered":"<p><img decoding=\"async\" class=\"aligncenter\" style=\"margin: 10px auto 5px; padding-left: 0px; padding-right: 0px; float: none; padding-top: 0px; border: 0px;\" title=\"resetpsw01\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2013\/07\/resetpsw01.jpg\" alt=\"resetpsw01\" width=\"602\" height=\"202\" border=\"0\" \/><\/p>\n<p>To fix the <strong>trust relationship failed error<\/strong> there is a quick solution that need few steps and avoid rejoining the machine to the domain.<\/p>\n<p>When you login to the system you receive the error:<\/p>\n<blockquote><p>The trust relationship between this workstation and the primary domain failed.<\/p><\/blockquote>\n<p>The problem is due to the <strong>secure communication<\/strong> between the workstation and the Active Directory domain no longer working. The computer\u2019s \"private secret\" doesn\u2019t have same value stored in the Domain Controller therefore the communication handled by Kerberos cannot be established.<\/p>\n<p><!--more--><\/p>\n<p>This situation often happen when you restore the <strong>virtual machines that use a snapshot<\/strong> taken months before.<\/p>\n<p>&nbsp;<\/p>\n<h2>The problem<\/h2>\n<p>You<strong> login the workstation<\/strong> entering the domain account and its password.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"margin: 0px auto; padding-left: 0px; padding-right: 0px; float: none; padding-top: 0px; border: 0px;\" title=\"resetpsw02\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2013\/07\/resetpsw02.jpg\" alt=\"resetpsw02\" width=\"424\" height=\"263\" border=\"0\" \/><\/p>\n<p>The system <strong>deny the access<\/strong> replying with the error message shown.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"margin: 0px auto; padding-left: 0px; padding-right: 0px; float: none; padding-top: 0px; border: 0px;\" title=\"resetpsw03\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2013\/07\/resetpsw03.jpg\" alt=\"resetpsw03\" width=\"484\" height=\"132\" border=\"0\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2>Fix<\/h2>\n<p>To fix Windows issues there are usually <strong>different solutions<\/strong>, one official fix from Microsoft and alternatives by some Administrators that can solve this matter faster.<\/p>\n<h4>Microsoft fix<\/h4>\n<p>To fix this issue, Microsoft suggest to <strong>rejoin the domain<\/strong> to restore the trust relationship as reported in the support article: <a href=\"http:\/\/support.microsoft.com\/kb\/162797\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\"><span style=\"color: #0066cc;\">http:\/\/support.microsoft.com\/kb\/162797<\/span><\/span><\/a>.<\/p>\n<h4>The quick fix<\/h4>\n<p>Log as <strong>Local Administrator<\/strong> in the server with the problem and open the Command Prompt.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"margin: 0px auto; padding-left: 0px; padding-right: 0px; float: none; padding-top: 0px; border-width: 0px;\" title=\"resetpsw04\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2013\/07\/resetpsw04.jpg\" alt=\"resetpsw04\" width=\"380\" height=\"295\" border=\"0\" \/><\/p>\n<p>You need to <strong>locate the netdom utility<\/strong> that in Windows 2008 and Windows 2008 R2 is stored in the <em>\\Windows\\System32<\/em> directory.<\/p>\n<p><span style=\"color: #0000a0;\">C:\\&gt;cd \/Windows\/System32<\/span><\/p>\n<p>Using the <strong>utility netdom<\/strong>, type the following command:<\/p>\n<pre class=\"lang:default decode:true brush: shell; gutter: true\">netdom.exe resetpwd \/s:&lt;domaincontroller&gt; \/ud:DOMAIN\\&lt;administrator&gt; \/pd:*<\/pre>\n<p><span style=\"color: #0000a0;\">C:\\Windows\\System32&gt;netdom.exe resetpwd \/s:w2k8r2-dc01 \/ud:NOLABNOPARTY\\Administrator \/pd:*<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"margin: 0px auto; padding-left: 0px; padding-right: 0px; float: none; padding-top: 0px; border: 0px;\" title=\"resetpsw05\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2013\/07\/resetpsw05.jpg\" alt=\"resetpsw05\" width=\"600\" height=\"297\" border=\"0\" \/><\/p>\n<p>If you try to login the system again, you <strong>no longer receive the error<\/strong> message.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"margin: 0px auto; padding-left: 0px; padding-right: 0px; float: none; padding-top: 0px; border: 0px;\" title=\"resetpsw06\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2013\/07\/resetpsw06.jpg\" alt=\"resetpsw06\" width=\"600\" height=\"413\" border=\"0\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2>Netdom.exe in Windows 7<\/h2>\n<p>Since <em>Windows 7<\/em> doesn't have netdom.exe utility installed by default, you can <strong>download netdom<\/strong> from <a href=\"https:\/\/nolabnoparty.com\/download\/netdom_windows7.zip\" target=\"_blank\">here<\/a>.<\/p>\n<ul>\n<li>Copy <strong>netdom.exe<\/strong> in C:\\Windows\\System32 and\u00a0<strong>netdom.exe.mui<\/strong> in\u00a0C:\\Windows\\System32\\en-US.<\/li>\n<li>Follow same procedure.<\/li>\n<\/ul>\n<p>This solution allows you to <strong>restore the machine functionality faster<\/strong> with just few click without rejoining the workstation to the domain.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/images\/firma.jpg\" alt=\"firma\" title=\"\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>To fix the trust relationship failed error there is a quick solution that need few steps and avoid rejoining the machine to the domain. When you login to the system you receive the error: The trust relationship between this workstation and the primary domain failed. The problem is due to the secure communication between the workstation and the Active Directory domain no longer working. The computer\u2019s \"private secret\" doesn\u2019t have same value stored in the Domain Controller therefore the communication handled by Kerberos cannot be established.<\/p>\n","protected":false},"author":3,"featured_media":7382,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[913,1065],"tags":[690],"class_list":["post-7388","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-active-directory-en","category-microsoft-en","tag-trust-relationship-failed-between-workstation-and-domain-en-en","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/7388","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=7388"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/7388\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/7382"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=7388"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=7388"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=7388"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}