Trust Relationship Between Workstation and Domain Fails
As part of the automated test i have created i use virtualization heavily (in specific Hyper V), which include lots of revert to snapshot (couple of time per day). i am using this to return to a basic snapshot i have ready to have our system installed.
Every now and than i came across a problem that i couldn't login to target VM because it lots trust relation with domain (specific message was "Trust Relationship Between Workstation and Domain Fails"), the problem occurs because the machine password used in the original snapshot has expired!
To overcome this you can update the GPO to keep it the same by updating the following GPO items:
- Domain controller: Refuse machine account password changes - set to enabled
- Domain member: Disable machine account password changes - set to enabled
- Domain member: Maximum machine account password age - set 999 (max)
after updating the above make sure to rejoin domain / run "gpupdate /force" and take snapshot again! (coz the current problematic snapshot you have is out of sync and each time you revert you will face the same problem)
In the default configuration the maximum age for machine password is 30 days.
Also in 2008 R2 the error is "the trust relationship between this workstation and the primary domain failed"
Trust Relationship Between Workstation and Domain Fails
Reviewed by Ran Davidovitz
on
2:40 PM
Rating:
No comments:
Post a Comment