Solved

Server 2008 user security problem

Posted on 2014-07-23
5
284 Views
Last Modified: 2014-07-24
Hello Experts,

I have a server running Windows Server 2008 standard and 45 client machines connected to the server, this morning one of my employees went to log on to her workstation as usual and got an error message saying "The security database on the server does not have a computer account for this workstation trust relationship".  I have tried deleting and re-adding her computer in active directory as well as her user account and nothing seems to work.  Does anyone know of a solution to this??  thank you!!
0
Comment
Question by:zraptor
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 7

Accepted Solution

by:
CorinTack earned 167 total points
ID: 40215223
Have you tried actually removing the PC from the domain on the computer, then re-joining the domain there?
0
 
LVL 38

Assisted Solution

by:Hypercat (Deb)
Hypercat (Deb) earned 167 total points
ID: 40215229
When you say you tried "deleting and re-adding her computer," did you actually unjoin and re-join the domain?  This is what is necessary to fix a trust relationship issue with a workstation. So, to correct the problem, you need to:

1.  From the workstation, UNjoin the domain (i.e., join a workgroup) and then restart the computer.
2.  Go to ADUC and delete the computer account.
3.  After the workstation has restarted, join the domain again.  This will, of course, create a completely fresh computer account on the domain and should resolve any issues with the trust relationship.
0
 

Author Comment

by:zraptor
ID: 40215460
ok great!  thank you!  I am having an issue with that though, there is no administrator account on the machine.  is there any way to log in without that since the AD account won't log in?
0
 
LVL 54

Assisted Solution

by:McKnife
McKnife earned 166 total points
ID: 40216341
There is an administrator account that cannot be deleted: the built-in "administrator".
It is disabled by default. Use the famous bootdisk to both unlock it and bank the password: http://pogostick.net/~pnh/ntpasswd/
...standard admin task :)
0
 

Author Comment

by:zraptor
ID: 40216344
thank you very much!
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question