Solved

Workstation Trust Relationship

Posted on 2013-05-23
5
832 Views
Last Modified: 2013-05-29
A while back we deleted a computer (windows 7) out of AD and then tried to re-add it with the same hostname. It shows up in AD when it's added and all the attributes look good but when I go to log in to the machine it says:

"The security database on the server does not have a computer account for the workstation trust relationship."

I've tried removing it from the domain and re-adding it. I've tried using the netdom resetpwd, I've tried so many things I've found online I don't even remember what they all are. :)

I looked through DNS and DHCP entries (windows server 2003) and don't see any issues with that. If I change the hostname on it I can log in just fine. Any other ideas on what to try?  

Please let me know if you need some more details and thank you!
0
Comment
Question by:Winsoup
  • 3
5 Comments
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 225 total points
Comment Utility
Have you tried Joe's machinepwd utility.   Can't hurt to try it at this point.  You have done a lot already and usually the steps you have taken fix the issue.

http://blog.joeware.net/2012/06/07/2513/

Thanks

Mike
0
 
LVL 12

Assisted Solution

by:Julian123
Julian123 earned 225 total points
Comment Utility
Another option I would try is:
1. Disjoin the computer from the domain if possible
2. Delete the Active directory for the computer
3. Rename the computer and reboot it
4. Rejoin the domain

This helps get rid of any issues involving having a previous account around.
0
 
LVL 3

Author Comment

by:Winsoup
Comment Utility
I tried that utility with no luck. I also found this (link below) and ran it and when I ran the nltest utility it came back with "bad password" so I ran the netdom resetpwd utility and ran the test again and it came back successful but I still can't log in with this hostname. Here are the steps I used.

Julian, I can log in if I change the hostname but I don't want to have to change the hostname to something that's out of the naming convention.

*Doesn't look like my link worked* Here it is:

http://www.cievo.sk/2012/02/21/reset-computer-accounts-in-active-directory-domain/
0
 
LVL 3

Accepted Solution

by:
Winsoup earned 0 total points
Comment Utility
Got it, the "service principal name"had an entry that was the same as another machine for some reason. I changed the other machine to what it was supposed to be and it works now.
Thank you for the help!!
0
 
LVL 3

Author Closing Comment

by:Winsoup
Comment Utility
This fixed my issue. The other two responses were good and would probably work in most other cases so I wanted to give them credit for that.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now