Trust Relationship Problem in an AD Computer

Sometimes a domain‑joined computer shows an error stating that the trust relationship between the workstation and the domain has failed. This means the secure channel between the computer and the Domain Controller (DC) is broken.

Causes

• Machine account password desynchronization

• System restore or cloning

• Network or replication issues

• Deleted or corrupted computer account

Solution

1. Reset the computer account on the DC (via ADUC → Reset Account).

2. Log on locally with a local admin account.

3. Repair the secure channel with PowerShell:

   powershell

   Test-ComputerSecureChannel -Repair -Domain domain.local -Credential (Get-Credential)

   
   

   • Use an AD admin account.

   • If result = True, trust is repaired.

   • If result = False, rerun until you see True.

Verification

• Restart the computer.

• Log in with a domain account to confirm trust is restored.

🎥 Tutorial

For a step‑by‑step demonstration, watch this YouTube tutorial: 👉 Active Directory Trust Relationship Repair Tutorial