Active Directory error about trust relationship
Summary: This article provides information on error "The security database on the server does not have a computer account for this workstation trust relationship."
This article applies to
This article does not apply to
Symptoms
Issue:
Cause
-
Resolution
Solution:
Delete the corrupt Computer Account from Active Directory Users and Computers, remove the server from the domain and join the server to the domain.
Note: Steps 1 through 4 are performed on a Domain Controller or using the Remote Server Administration Tools (RSAT).
1. Log on to the Domain Controller using the domain Administrator account. Press the Windows Logo+R, type dsa.msc and press Enter to open Active Directory Users and Computers .
2. Select the Organization Unit (OU) that the computer object resides in.
3. Right-click on the computer object and select Delete.
4. Click Yes to delete the computer object.
Note: Steps 5 through 16 are performed on the computer exhibiting the error in the Issue section of this article.
5. Log on to the server using the local Administrator account. Press the Windows Logo+R, type sysdm.cpl and press Enter to open System Properties.
6. Click Change....
7. Click Workgroup:, enter a WORKGROUP name and click OK.
8. Click OK to accept the Computer Name/Domain Changes dialog box.
9. Click OK to accept the Computer Name/Domain Changes dialog box.
10. Click Close.
11. Click Restart Now to restart the server.
12. Log on to the server using the local Administrator account and complete steps 5 and 6 above. Click Domain:, enter the name of the domain and click OK.
13. Click OK to accept the Computer Name/Domain Changes dialog box and type the domain Administrator account and password for the domain followed by Enter. Click OK accept the Computer Name/Domain Changes dialog box.
14. Click OK to accept the Computer Name/Domain Changes dialog box.
15. Click Close.
16. Click Restart Now to restart the server.
Note : Please ensure the system time & date is set to Synchronize with an Internet time server or it may lose the trust again.
Note: Please also enable network discovery and flush/register the DNS
Commands -
netsh advfirewall firewall set rule group="network discovery" new enable=yes
ipconfig/flushdns
ipconfig /registerdns
Additional Information:
The error can occur for many reasons including a corrupt or missing computer account in Active Directory.
This information applies to Windows 2003, Windows 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 and Windows Server 2012 R2.
Affected Products
Servers, Microsoft Windows Small Business Server 2008, Microsoft Windows Small Business Server 2011 Essentials, Microsoft Windows Essential Business Server 2008, Microsoft Windows 2008 Server R2, Microsoft Windows 2008 Server Service Pack 2
, Microsoft Windows 2012 Server, Microsoft Windows 2012 Server R2
...
Article Properties
Article Number: 000138271
Article Type: Solution
Last Modified: 05 Oct 2021
Version: 4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.