What does it mean when it says the trust relationship between this workstation?

I am getting this error message on a couple Windows 10 machines:

"The trust relationship between this workstation and the primary domain failed"

It is when you try to log in.

However, I can get past this error by disconnecting the internet/Wi-Fi, then login, then reconnect the internet/Wi-Fi. If I keep the internet connected while trying to log in, I get that error message.

I tried changing the IP address to static to DHCP. I tried adding a user as an administrator. I tried to find the computer in Active Directory and resetting the account. 

Any ideas on how to fix this? I would like to avoid leaving and rejoining the domain, because I did that before and some data was lost. 

Any other fixes maybe? 

I tried numerous reboots and different logons. 

Any help is greatly appreciated. 

These are both Windows 10 desktops. We have 2 ADs, both on Windows Server 2012 R2. 

CTX227147

{{tooltipText}}

Article | Configuration 3rd party / compatibility | {{likeCount}} found this helpful | Created: {{articleFormattedCreatedDate}} | Modified: {{articleFormattedModifiedDate}}

Symptoms or Error

Users cannot log on to a system using Active Directory credentials and the following error message appears:
"The trust relationship between this workstation and the primary domain failed.”

 

What does it mean when it says the trust relationship between this workstation?

 This issue is seen when the session logon is attempted through Remote Desktop Protocol, ICA, or directly at the console. Only logons using local accounts are successful. The underlying problem when this error is seen is that the machine you are trying to access can no longer communicate securely with the Active Directory domain to which it is joined.


Solution

 

First, determine which component is having the issue. Then use the repair method that works best for your environment.

  Provisioning Services Server, XenDesktop or XenApp Delivery Controller or XD/XA VDA:

Option 1) Reset the Computer Account Password in AD Users and Computers

 

What does it mean when it says the trust relationship between this workstation?

Option 2: Reset via PowerShell

Option 3: Change the domain value in the System properties of the machine from the FQDN to the NETBIOS name (or vice-versa).(NOTE: Not applicable to delivery controller as per https://support.citrix.com/article/CTX215880 )

i) Login as a local administrator.
ii) Open the Windows System properties
iii) Change: “domain.net” to just “domain”

What does it mean when it says the trust relationship between this workstation?
        
What does it mean when it says the trust relationship between this workstation?


 

Option 4) CMD line using NETDOM tool:

1. Logon to the machine with a local administrator account.

2. Obtain the tool netdom.exe from Windows Server 2008 or Windows Server 2008 R2 CD to enable the Active Directory Domain Services role.

3. Note: For Windows Vista and Windows 7, utilize the Remote Server Administration Tools (RSAT) to enable the Active Directory Domain Services role.

4. Run netdom.exe to change the password.

5. Open command prompt with administrator rights.

6. Execute the command: netdom.exe resetpwd /s:<server> /ud:<user> /pd:*

7. Restart the machine
  
Provisioning Services Target Device

Make sure that you have configured the PVS environment properly.
Reference the following article: https://support.citrix.com/article/CTX132289

Once that is confirmed. Shut the target device down and reset the machine account password for the affected target device in the PVS console.

What does it mean when it says the trust relationship between this workstation?


Problem Cause

This can happen for a number of reasons. This article address the situations where the machine account password needs to be reset. These are the non-destructive methods for fixing the most common causes for the trust relationship issue.

  For example:

  • Machine was disjoined and rejoined to the domain in PVS/MCS environment which discard all changes on reboot.
  • Machine was restored to a system restore point or to a snapshot that is old enough to have a different machine account password than the one currently in use by AD.
  • More than one machine on a network with the same hostname.
  • AD Machine account object corruption.
  • AD policy that would disable a computer after x number of days of not authenticating.
  • Computer object in AD is deleted. 


Additional Resources


Disclaimer

Citrix is not responsible for and does not endorse or accept any responsibility for the contents or your use of these third party Web sites. Citrix is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by Citrix of the linked Web site. It is your responsibility to take precautions to ensure that whatever Web site you use is free of viruses or other harmful items.

How do you fix the trust relationship between workstation and domain?

To resolve this issue, remove the computer from the domain, and then connect the computer to the domain. Use a local administrator account to log on to the computer. Select Start, press and hold (or right-click) Computer > Properties. Select Change settings next to the computer name.

What does it mean when the computer says the trust relationship between this workstation and the primary domain failed?

The underlying problem when this error is seen is that the machine you are trying to access can no longer communicate securely with the Active Directory domain to which it is joined.

What is trust relationship on a computer?

Trust relationships are an administration and communication link between two domains. A trust relationship between two domains enables user accounts and global groups to be used in a domain other than the domain where the accounts are defined.

What causes a trust relationship error?

RESOLUTION. The most common cause of the trust relationship failing upon restoring a workstation or server is the computer account password had been changed between the last backup taken and the restore attempt.