Solved

Servers Error

Posted on 2013-12-16
7
331 Views
Last Modified: 2013-12-17
I have started seeing this on some new build servers.  

It happens on server 2012 and server 2K8R2.

Our domain level is 2003

After a newly build server is on the domain.  I will pass it off to applications support to do their software install.

After about an hour I get the below error.

I have seen this before normally I just remove the server from the domain delete the computer account on the DCs add it again and all is fine.  But as of late that does not help.

Error;
the security database on the server does not have a computer account workstation trust relationship


any help would be great.
0
Comment
Question by:RSlimmon
  • 4
  • 3
7 Comments
 
LVL 19

Expert Comment

by:jss1199
ID: 39721751
1. Open up Active Directory Users & Computers pointed to the domain the computer account resides in
2. From the “View” pull-down menu, make sure that “Advanced Features” is checked
3. Navigate to the part of your organizational unit (OU) structure where the computer account for this server resides
4. Open the Properties for the computer object
5. Choose the “Attribute Editor” tab on the Properties dialog box
6. Check the Attributes dNSHostName & servicePrincipalName – anywhere that a fully qualified hostname is specified (e.g. myserver.mydomainname.com), make sure that the entry matches the hostname you have configured when you go here on your server: Start -> Computer -> Right-Click, Properties -> Change Settings (under “Computer name, domain… settings”) -> Full Computer Name
0
 

Author Comment

by:RSlimmon
ID: 39721782
DNShostname is correct but serviceprincipalname is strange.  I have:

cvs/computername
WSMAN/computername
WSMAN/FQDN


What should it be?
0
 
LVL 19

Accepted Solution

by:
jss1199 earned 500 total points
ID: 39721807
Those are fine, but I would also expect to see:

HOST/Scomputername
HOST/FQDN

Can you confirm those are missing
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:RSlimmon
ID: 39721812
Those are missing I have added them.

It seems to be working now.

Any idea on cause?

I will leave it for a day to make sure it works then close this off and give you the points.

Thanks for the help
0
 
LVL 19

Expert Comment

by:jss1199
ID: 39721818
Not sure why these would be missing after a domain join - possibly something during the new build process.  Do you use templates or images to build new servers?

Is the user joining the machines to the domain restricted in any way or is it a full admin?
0
 

Author Comment

by:RSlimmon
ID: 39721871
We do use templates as these are VMs

I am using my Admin account its a Domain admin account.  (No enterprise but I should not need that)
0
 

Author Closing Comment

by:RSlimmon
ID: 39725351
Still would love to know why this is happening but the fix worked.

Thanks
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My GPO's made for 2008 R2 servers were not allowing me to RDP into a new 2012 server by default.  That’s why I tried to allow RDP via Powershell, because I could log into a remote shell without further configuration. Below I will describe how I wen…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now