Fix The trust relationship between this workstation

Today I will tell you in this documentary How to solve the trust relationship between this workstation

When the error “The trust relationship between this workstation and the primary domain has failed” occurs, users are typically unable to log into their system via the domain and see the error message immediately after entering their login details. This error means that the connection between the workstation and the domain controller is broken, usually because the workstation’s secure link to the domain is broken.

How to solve the trust relationship between this workstation

The most common reason is when a computer account in the domain becomes out of sync, often due to a password mismatch between the local computer and the domain’s Active Directory. Changes to the network settings or problems with the domain controller can also cause this problem.

Below are several methods that can help resolve this error.

1. Check DHCP Settings

Network problems between the workstation and the domain are often a result of incorrect configurations. Correctly configuring the DHCP server is critical as it provides the IP address and DNS required to connect to the domain controller. Incorrect network details can disrupt this connection and lead to errors. Checking the DHCP settings helps to reestablish proper communication with the domain.

Press Windows + R, type dhcpmgmt.msc and press Enter.
Expand your server to apps.comIPv4Scope. If your network is 192.168.1.0/24 but is set to 192.168.100.1/24, you need to change the DHCP settings.
Close Device Management.

1.1. For a TP-Link router

Open an Internet browser such as Google Chrome, Mozilla Firefox or Edge.

Type the IP address of the router to access it.
Under the Red tab, select LAN and then DHCP to inspect its DHCP settings. In this case, DHCP is enabled and set from 192.168.1.100 to 192.168.1.200, which is correct.
Close the browser.

2. Rejoin a computer to a domain

Rejoining a computer to the domain can fix the trust relationship error by reestablishing the secure link with the domain controller. Removing and re-adding the machine creates a new computer account in Active Directory, which updates the computer's credentials and creates a new trusted connection, allowing the workstation to successfully authenticate with the domain controller.

Log in to Windows 10 with a local administrator account.
Press the Windows key and press E to open File Explorer.
Right-click This PC and choose Properties.
Click Advanced system settings.
Select the Computer name tab.
Click Change to add the machine to the workgroup.
Choose Workgroup and type the name (e.g., WORKGROUP).
Click OK.

Enter the domain administrator account and password, and then click OK.
Click OK, and then click OK again.
Close System Properties.
Restart your Windows machine.
Log in to Windows 10 with the local administrator account.
Press the Windows key and press E to open File Explorer.
Right-click on This PC and choose Properties.
Click on Advanced system settings.
Select the Computer name tab.
Click on Change to add the machine to the domain.
Enter the domain (e.g., apps.com).
Click on OK.
Enter the domain administrator account and password and click OK.
Click on OK and then OK again.
Close System Properties.
Restart your Windows machine.
Log in to Windows 10 with the domain user account.
Enjoy working on your machine.

3. Reset trust via PowerShell

Using PowerShell can efficiently fix the trust relationship error without removing the computer from the domain. The Test-ComputerSecureChannel command verifies the secure channel and the -Repair option fixes it. This method reestablishes the connection to the domain controller quickly, saving time and reducing interruptions, which is why administrators prefer it.

Log in to Windows 10 with a local administrator account.
Click the Start menu and type PowerShell.
Right-click PowerShell and choose Run as administrator.
Press Yes to confirm.
Type $credential = Get-Credential and press Enter.
Enter the domain administrator account and password, and then click OK.
Type Reset-ComputerMachinePassword -Credential $credential and press Enter.
Close PowerShell.
Restart your Windows computer.
Log in to Windows 10 with the domain user account.

4. Add the domain controller to the Credentials ServerCredential Manager

Adding the domain controller to the Credential Manager allows the system to store the correct login details to connect to the domain controller. This makes the computer have the necessary login information in the cache, and helps resolve trust issues/avoid login problems. That makes the communication to the domain more reliable.

Log in to Windows 10 using the local administrator account.
Hold down the Windows logo key and press R. Type control.exe /name Microsoft.CredentialManager and press Enter to open the Credential Manager.
Open Windows Credentials.
Enter the website or network location and credentials.
Click OK.
Close the Credential Manager.
Restart your Windows computer.
Log in to Windows 10 using the domain user account.

5. Use Netdom.exe to reset the password for a computer account

You can reset the password for the computer account using the Netdom.exe tool. This action reestablishes a secure connection between the workstation and the domain by updating the credentials in Active Directory. It effectively resolves any discrepancies that cause trust issues without requiring you to rejoin the domain, making it a simple and efficient solution.

Log in to the Windows Server using a domain administrator account.
Hold down the Windows logo key and press R. Type cmd and press Enter to open the Command Prompt.
Type the line netdom resetpwd /s:server /ud:domainUser /pd:* and press the Enter key, where s is the name of the domain server, domain is the name of the domain, and User is the account that does not appear to connect to the domain controller.
Exit the Windows Command Prompt.
Switch to the Windows client machine.
Restart the Windows machine.
Log in using a domain user account.
Enjoy working on your machine.

6. Reset the computer account

This simplifies the relationship between your computer and the domain. It will refresh the link between your computer and the network domain, erase outdated information, and resolve discrepancies. It will make your computer connect to the network again and again without having to go through the lengthy process of reconnecting, saving you a lot of time and effort.

Hold down the Windows logo key and press R. Type dsa.msc and press Enter to open Active Directory Users and Computers.
Expand the domain name; for example, apps.com.
Select Computers.
Locate the computer account that cannot connect to the domain, such as Jasmin.
Right-click the computer (Jasmin) and choose Reset Account.
Click Yes to confirm resetting the account.
Click OK.
Close Active Directory Users and Computers.
Restart Windows 10 machine. Log in with the domain user account.
Enjoy working on your Windows machine.

7. Perform a System Restore

If other solutions don't work, try using System Restore as a last resort to fix the trust relationship issue. This method can return your system to a previous state, undoing recent changes that might have broken the secure link between your computer and the domain. It won't affect personal files, but it will restore system settings, potentially fixing the error and reestablishing the trust relationship.

How to Fix The trust relationship between this workstation