Fixing Active Directory Trust Issues.
Fixing Active Directory Trust Relationship Issues: 3 Quick Methods.
If you get the error "๐๐ฉ๐ฆ ๐ต๐ณ๐ถ๐ด๐ต ๐ณ๐ฆ๐ญ๐ข๐ต๐ช๐ฐ๐ฏ๐ด๐ฉ๐ช๐ฑ ๐ฃ๐ฆ๐ต๐ธ๐ฆ๐ฆ๐ฏ ๐ต๐ฉ๐ช๐ด ๐ธ๐ฐ๐ณ๐ฌ๐ด๐ต๐ข๐ต๐ช๐ฐ๐ฏ ๐ข๐ฏ๐ฅ ๐ต๐ฉ๐ฆ ๐ฑ๐ณ๐ช๐ฎ๐ข๐ณ๐บ ๐ฅ๐ฐ๐ฎ๐ข๐ช๐ฏ ๐ง๐ข๐ช๐ญ๐ฆ๐ฅ" itโs often due to the computer losing sync with Active Directory (like when a password update is missed between the Domain Controller and a computer).
And in this post I'll give you 3 quick ways to Fix this issue:
๐ ๐ฒ๐๐ต๐ผ๐ฑ ๐ญ: ๐ฅ๐ฒ๐ฝ๐ฎ๐ถ๐ฟ ๐ง๐ฟ๐๐๐ ๐๐ถ๐๐ต ๐ฃ๐ผ๐๐ฒ๐ฟ๐ฆ๐ต๐ฒ๐น๐น (๐ฆ๐ถ๐บ๐ฝ๐น๐ฒ & ๐๐ฎ๐๐).
๐ญ๏ธ > ๐๐ผ๐ด ๐ถ๐ป ๐ฎ๐ ๐ฎ Local Admin.
๐ฎ๏ธ > ๐ฅ๐๐ป: Test-ComputerSecureChannel -Repair -Credential DomainName\Administrator
๐ฏ๏ธ > ๐ฅ๐ฒ๐๐๐ฎ๐ฟ๐ ๐ฎ๐ป๐ฑ ๐ถ๐ ๐๐ต๐ผ๐๐น๐ฑ ๐ฟ๐ฒ๐ฐ๐ผ๐ป๐ป๐ฒ๐ฐ๐.
๐ ๐ฒ๐๐ต๐ผ๐ฑ ๐ฎ: ๐ฅ๐ฒ๐๐ฒ๐ ๐๐ผ๐บ๐ฝ๐๐๐ฒ๐ฟ ๐ฃ๐ฎ๐๐๐๐ผ๐ฟ๐ฑ ๐๐ถ๐๐ต ๐ฃ๐ผ๐๐ฒ๐ฟ๐ฆ๐ต๐ฒ๐น๐น.
๐ญ๏ธ > ๐๐ผ๐ด ๐ถ๐ป ๐ฎ๐ ๐ฎ Local Admin.
๐ฎ๏ธ > ๐ฅ๐๐ป: Reset-ComputerMachinePassword -Server DomainServer -Credential DomainName\Administrator
๐ฏ๏ธ > ๐ฅ๐ฒ๐๐๐ฎ๐ฟ๐ ๐ฎ๐ป๐ฑ ๐ถ๐ ๐๐ต๐ผ๐๐น๐ฑ ๐ฟ๐ฒ๐ฐ๐ผ๐ป๐ป๐ฒ๐ฐ๐.
๐ ๐ฒ๐๐ต๐ผ๐ฑ ๐ฏ: ๐๐ถ๐-๐ท๐ผ๐ถ๐ป ๐ฎ๐ป๐ฑ ๐ฅ๐ฒ-๐ท๐ผ๐ถ๐ป ๐๐ผ๐บ๐ฎ๐ถ๐ป ๐จ๐๐ถ๐ป๐ด ๐ฑ๐-๐ท๐ผ๐ถ๐ป.
๐ญ๏ธ > ๐๐ผ๐ด ๐ถ๐ป ๐ฎ๐ ๐ฎ Local Admin.
๐ฎ๏ธ > ๐๐ถ๐๐ท๐ผ๐ถ๐ป ๐ณ๐ฟ๐ผ๐บ ๐๐ต๐ฒ ๐ฑ๐ผ๐บ๐ฎ๐ถ๐ป: dsjoin /leave
๐ฏ๏ธ > ๐ฅ๐ฒ๐๐๐ฎ๐ฟ๐ ๐๐ต๐ฒ๐ป ๐ฟ๐ฒ๐ท๐ผ๐ถ๐ป ๐๐ต๐ฒ ๐ฑ๐ผ๐บ๐ฎ๐ถ๐ป: dsjoin /domain DomainName /userD DomainAdminUser /passwordD *
๐ฐ๏ธ > ๐ฅ๐ฒ๐๐๐ฎ๐ฟ๐ ๐ฎ๐ด๐ฎ๐ถ๐ป, ๐ฎ๐ป๐ฑ ๐๐ต๐ฒ ๐ฟ๐ฒ๐น๐ฎ๐๐ถ๐ผ๐ป๐๐ต๐ถ๐ฝ ๐๐ต๐ผ๐๐น๐ฑ ๐ฏ๐ฒ ๐ฟ๐ฒ๐๐๐ผ๐ฟ๐ฒ๐ฑ.
You can also try:
Ways to Fix Active Directory Trust Relationship Issues
Method 1: Disjoin & Rejoin Domain (dsjoin)
- Log in as local admin.
- Run: dsjoin /leave (to disjoin).
- Restart, then rejoin: dsjoin /domain DomainName /userD DomainAdminUser /passwordD *
- Restart again.
Method 2: Repair Trust via PowerShell
- Log in as local admin.
- Run: Test-ComputerSecureChannel -Repair -Credential DomainName\Administrator
- Restart.
Method 3: Reset Computer Password (PowerShell)
- Log in as local admin.
- Run: Reset-ComputerMachinePassword -Server DomainServer -Credential DomainName\Administrator
- Restart.
Method 4: Reset Secure Channel (Netdom)
- Log in as local admin.
- Run: netdom resetpwd /Server:DomainController /UserD:DomainAdmin /PasswordD:*
- Restart.
Method 5: Delete & Recreate Computer in AD
- Delete the computer object from Active Directory Users & Computers (ADUC).
- Log in as local admin.
- Run: Remove-Computer -UnjoinDomainCredential DomainName\Administrator -PassThru -Verbose
- Restart & rejoin using: Add-Computer -DomainName "DomainName" -Credential DomainName\Administrator -Restart
Method 6: Check & Sync Time
- Log in as local admin.
- Run: w32tm /resync
- If needed, manually set time sync: w32tm /config /manualpeerlist:"time.windows.com" /syncfromflags:manual /update
- Restart.