Trust Relationship failed

smckeown777
smckeown777 used Ask the Experts™
on
All

Have a client with a laptop(HP 530) running Win 7 Pro(32-bit)
They have an SBS2011 server with domain setup, have about 30 laptops on the domain
5 of the laptops are the HP 530 models

1 of these laptops is throwing the error 'Trust relationship between this computer and primary domain failed' when trying to login

This started happening about 6 months ago - first time it happened I removed account from AD and disjoined from the domain on the laptop - rejoined and all is well

Couple of months passed and again this happened - again I disjoined domain, removed account from AD, rejoined and all is well...

Now its back happening again

Started looking for what could be causing this issue I found another answer on this site that pointed to checking the SID for the computer - to make sure the SID matches the SID of the computer account in AD

Turns out it doesn't match, they are different
This was the answer I was using - http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_27672173.html

Ok so in ADSIEDIT I've drilled down to the Computers OU - selected Properties and checked the objectSID - is this the correct property(just before I continue?)

My main question - since I've previously removed the computer object from AD, removed laptop from domain etc...and these errors still crop up - is it as simple as changing the SID property in ADSIEdit to match the laptop? Or is there more to it?

If not - how do I remove the account properly to get this machine up and running again?

I've attached the eventlog from the laptop for reference in case anyone needs to review that, anything else needed let me know...

Thanks
Shane
sid.zip
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
It is better to reset the computer object in Active Directory Users and Computers. Right click the computer object and click reset. This way you keep the security principle intact in your environment.
Top Expert 2012

Author

Commented:
Ok, just so I am clear - what does this do exactly? Resets the SID in AD to match the current laptop SID? Or do I have to disconnect from domain - reset object - reconnect to domain?

Cheers...
It resets the computer password in your environment. It's more of a note for future occurrences.
11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

Top Expert 2012

Author

Commented:
Ok, but what about the SID mismatch? Is this now the issue?
Disjoin from the domain, delete the computer object, and rejoin the domain.
Top Expert 2012

Author

Commented:
Right, don't want to come across as stupid but I've already tried all these steps!

This is the third time this has happened, the first and second time I removed laptop from domain, deleted computer object, rejoined domain - all good for 3-4 weeks and then trust failed again...which is why I posted here, its like the object is not deleting correctly or I am missing something...
Raymond PengSystems Engineer

Commented:
I think somewhere down the line during the imaging process it's using existing information for another machine.  How are you laying the image down?  Can you reimage the machine?
Top Expert 2012

Author

Commented:
All machines were clean installed using standard Win7 DVD, manual process, no imaging as such...

If possible I'd rather change SID on this machine - is that possible without clean install?
Top Expert 2012

Author

Commented:
I've disjoined from domain, deleted the computer object, renamed the laptop to new name, rejoined domain, will leave this for a few days to see how it works out...thanks for help so far.
Top Expert 2012

Author

Commented:
Thanks for the help, pc is still working fine, will report back if things go bad again...

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial