13. april 2022

Fix trust-relationship failed WITHOUT domain rejoining !

https://theitbros.com/fix-trust-relationship-failed-without-domain-rejoining/

https://community.spiceworks.com/how_to/108912-fix-the-trust-relationship-between-this-workstation-and-the-primary-domain-failed


You will need access to the local OS (and LAN with contact to domain) :

Pull out the LAN cable, shut down computer and restart PC

Log on with the original credentials (Domain logon - still LAN cable disconnected)

When the desktop appear, insert LAN cable


If this is not possible you will need to logon as a local administrator


You can view the last password set time for a computer object account in the AD domain using the PowerShell cmdlet Get-ADComputer

get-adcomputer -Identity [computername] -Properties PasswordLastSet


You can verify that the computer local password is synced with the computer account password on the domain controlled

Test-ComputerSecureChannel -repair -credential DOMAINname\ADMINISTRATORname -verbose

No reboot needed




PowerShell command

NAME

    Test-ComputerSecureChannel


SYNTAX

    Test-ComputerSecureChannel [-Repair] [-Server <string>] [-Credential <pscredential>] [-WhatIf] [-Confirm]  [<Common

    Parameters>]