{"id":1198,"date":"2016-12-28T01:22:15","date_gmt":"2016-12-28T05:22:15","guid":{"rendered":"http:\/\/mikemartinezonline.com\/blog\/?p=1198"},"modified":"2016-12-28T01:22:15","modified_gmt":"2016-12-28T05:22:15","slug":"fix-the-trust-relationship-between-this-computer-and-the-primary-domain-failed-error","status":"publish","type":"post","link":"https:\/\/mikemartinezonline.com\/blog\/2016\/12\/28\/fix-the-trust-relationship-between-this-computer-and-the-primary-domain-failed-error\/","title":{"rendered":"Fix "The trust relationship between this computer and the primary domain failed" error"},"content":{"rendered":"

This is something that happens very often in large organizations with remotely connected sites (whether via MPLS nodes, connected VPNs or remote VPN users).<\/p>\n

If you’ve spent any time in the desktop support arena you’ve likely had this error\/issue dozens of times.
Here are some surefire ways to fix this fairly quickly.<\/p>\n

MANY, many sites will tell you to remove the PC from the domain, delete the computer account and then re-join the computer. This does work – SOMETIMES and can bring on even more problems when it fails.<\/p>\n

A simpler solution, that actually works, is to use PowerShell to resolve the issue.
You will need to log into the computer as a local administrator (or possibly you can use the cached domain admin credentials if that’s still an option)<\/p>\n

Here are the commands to use in order of preference.<\/p>\n

Depending on what version of Windows you are on and how up to date it is you should first download the latest Windows Management Framework (WMF). this contains the latest versions of PowerShell, DSC, WMI, and WinRM for downlevel versions of Windows and Windows Server. Here’s that link<\/strong><\/a><\/p>\n

1st try this one from an Admin Powershell:<\/p>\n

\"image\"<\/a><\/p>\n

Test-ComputerSecureChannel -Repair -Credential (get-credential)<\/em><\/p>\n

After that completes restart computer and try domain login.<\/p>\n

If that doesn’t work try this one<\/strong>:<\/p>\n

Reset-ComputerMachinePassword -Server <ClosestDomainControllerNameHere> -Credential <DOMAIN\\domain.admin><\/em><\/p>\n

Make sure to specifiy you DC and your domain user name, you’ll be prompted for you password.
The script will run and you’ll be back to the Powershell prompt.
Then just restart machine and try domain login.<\/p>\n

An older method you can also try the NETDOM way ( most useful on some non upto date Win7 machines).
You’ll likely have to download the Microsoft Remote Server Admin Tools from here.<\/strong><\/a>  Install and then <\/p>\n

use the following from an elevated cmd prompt:
netdom.exe resetpwd \/s:dc-hostname.domain \/ud:domainadminusername \/pd:* (enter the domain admin password when prompted)<\/em><\/p>\n

Hope this helps some.<\/p>\n","protected":false},"excerpt":{"rendered":"

This is something that happens very often in large organizations with remotely connected sites (whether via MPLS nodes, connected VPNs or remote VPN users). If you’ve spent any time in the desktop support arena you’ve likely had this error\/issue dozens of times. Here are some surefire ways to fix this fairly quickly. MANY, many sites … Continue reading “Fix "The trust relationship between this computer and the primary domain failed" error”<\/span><\/a><\/p>\n","protected":false},"author":587,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[260,11,256,15,218,257],"tags":[],"class_list":["post-1198","post","type-post","status-publish","format-standard","hentry","category-domain","category-windows","category-windows-10","category-windows-7","category-windows-8","category-windows-server"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t