"Trust relationship between workstation and domain controller have failed"

[The_Unbeliever]

Normally this problem is not a biggie.

But it is when the PC uses UEFI.

This causes most Linux distros not to see the C: partition (when you use an offline password change utility).

And the local administrator account is disabled.

And the guest account is disabled as well.

And booting from the install CD to run a command prompt from the repair option doesn't work as the installer says that the target windows version is totally different from the version being run from the CD... (this is for a registry edit to re-enable the local admin account)... for both the 32-bit and 64-bit version...

Lovely.

In the end, the solution is so simple, it is laughable.

Disconnect the network cable, boot the PC up, login, re-enable local admin account, reboot, log in as local admin, reconnect network cable, rejoin domain, and you're all set.

Fun.

 

[gjfourie]

/notes scenario and fix.... Adds to toolbox.

Thx

 

[loc]

Had this dozens of times..network cable is easiest way for sure!

 

[The_Unbeliever]

Had this dozens of times..network cable is easiest way for sure!

But it is the last thing you'll think of doing

 

[Nerfherder]

But it is the last thing you'll think of doing

I'm having this same issue on win7 and Active Directory. I connect via wifi and move between work and home.

I usually have to restart but found the other day that if I hibernate then its fine. I can't remember if I tried to just turn off the wifi.

 

[Sinbad]

Was the workstation cheating on the DC?

 

[The_Unbeliever]

Was the workstation cheating on the DC?

Must be because the last thing it did was a system restore...

 

[Hamish McPanji]

Was the workstation cheating on the DC?

I think the workstation has been friendzoned

 

[whatnot]

If things are done right, local administrator accounts are enabled and password protected with a complex password, as dictated by standard procedures & policies.

 

[The_Unbeliever]

If things are done right, local administrator accounts are enabled and password protected with a complex password, as dictated by standard procedures & policies.

IF you have the time to do that properly... more often than not you have to do a rush job on the workstation and there's no time (or you forget to add the local admin+pass)....

 

[])ragon_\/oid]

Must be because the last thing it did was a system restore...

Your computer is like a user to Active Directory. Every computer has an account. Active directory uses passwords that change every few days (30 If I remember correctly), to make sure the computer is indeed the computer. Doing a system restore most possibly changed this password back to the old password, which caused a trust relationship failure. (Well, something in that direction).

http://implbits.com/active-directory/2012/04/13/dont-rejoin-to-fix.html might be worth while looking at that. Looks like you can use netdom.exe to easily fix the issue.