Syed Jahanzaib Personal Blog to Share Knowledge !

September 7, 2015

Resolving “Trust Relation between this workstation and the PDC”


Just adding this post as reference on howto solve TRUST RELATIONSHIP ERROR which may appear when you try to login to your workstation using domain account.

trust-error

In this post I have used NETDOM / Windows network wizard & Powershell methods. All worked fine for different OS

 


Method # 1 / NETDOM command

Login on the effected computer with the local admin account,, (if you dont have it then simply unplug the wire/wireless and then login with your domain ID and it will login, but this domain ID must have Admin privileges)

Open COMMAND prompt &  Issue following command

netdom resetpwd /s:domainserver /ud:domain\admin /pd:*

Example if you have following setup

  • AD Server Name : DC01
  • Domain Name : mydomain.local
  • User Name : DOMAIN_ADMIN_ID

Complete CMD example …

netdom resetpwd /s:dc01 /ud:mydomain.local\domain_admin_id /pd:*

It will ask you to enter password, simply enter the Administrator id password , and enter. [prompt will not let u see the typing so careful when typing password]. Once you see successfull message , restart the machine, and then login with domain user account & hopefully it will login insha Allah.


Method # 2 / Powershell (version 3 required)

To reestablish trust you can also use powershell command. (You must have at least PS ver3. windows 2008/7 have ver 2 by default, so you may want to upgrade it from MS site here )

PS command:

Test-ComputerSecureChannel -repair -Credential (Get-Credential)]

It will ask you to enter account credentials, , simply enter domain\ID and password of domain Admin account, and enter.

After then simply log off and login with your domain id (or better to restart the system) and it will work Insha Allah.


Method # 3 (ForWindows XP/7/10 Only which have network wizard option)

I accidentally deleted some COMPUTER accounts under Active Directory Users > Computers section, This resulted in Trust relationship error on various workstations,

At client side, unplug Wire, (& disable WiFi) , this will allow you to logon to workstation using your domain account,(Make sure your domain user have local admin rights,) then simply run the network wizard ,

Then reboot & will be restored just like in previous working condition.

if you use the network wizard, you dont have to join – re-join the domain, it will simply add the computer entry in AD.

If your domain account don’t have ADMIN privileges, then you have to login with system local admin account. If you even dont have local admin account then reset it from any password crack utility.

if nothing works, then you have to unjoin this workstation from the domain, and re join it. If you use same user id on rejoining then you will see the same user profile as before.

 


Upgrade Powershell in 2008

To upgrade powershell ver 2.0  to new version in windows 2008 R2 , do following

Afterwards It may ask you for a restart … Do so so changes can take effect.


Regard’s

Syed Jahanzaib

2 Comments »

  1. Dear sir

    I am Debasish Ghosh.i regularly follow your blogs.sir i need a cache server for web cache can you help me?

    On Mon, Sep 7, 2015 at 9:49 AM, Syed Jahanzaib Personal Blog to Share

    Like

    Comment by debasish ghosh — September 9, 2015 @ 12:41 PM

  2. Jazak allah khairan brother for your efforts to help us gain knowledge, please share exchange related issues and resolution also

    Regards Md shafiq parvez 9769112168

    Like

    Comment by md.shafiq parvez — September 16, 2015 @ 11:09 AM


RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: