Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

i got this message when i try to login the file server "the trust relationship between this workstation and the primary domain failed "

can anyone help me


share|improve this question

4 Answers 4

Probably the workstation account password has come out of sync or has become corrupted.

Basically you have re authenticate with the domain, in other words, rejoining the domain.

I refer you to this KB with more details on how to verify if this is the problem, and how to solve it.

share|improve this answer
What KB? –  Chris S May 20 '10 at 17:09
So sorry, I messed up the link. You probably googled it up already, but here it is: support.microsoft.com/kb/216393 - also relevant: support.microsoft.com/kb/150493 –  Gomibushi May 22 '10 at 17:59
NEW version of link: support.microsoft.com/kb/162797 –  Warren P Apr 1 '13 at 13:55

Another reason for this error may be the system time difference on both machines. If they differ too much (think 2 hours or more) authentication fails

share|improve this answer
thanks this working now –  hossam alkhalili May 10 '10 at 8:03
If time differs more than 5 minutes, kerberos breaks. –  MDMarra Nov 15 '12 at 17:54

This KB also applies. http://support.microsoft.com/kb/162797

share|improve this answer

on your workstation, unjoin from domain - restart, add it to workgroup then restart on the server - in active directory users and computers, delete the computer account

then on the workstation, re-join to the domain.

share|improve this answer
You only need to unjoin (it'll force you to join a workgroup at the same time), reboot, reset the computer account on the domain, then rejoin the domain. No deleting necessary, no restarting the server! –  Chris S May 20 '10 at 17:11
A trick I've noticed (works for me at least) is to rejoin the domain by stipping the tld. So for a "contoso.com" joined computer, you can't join "contoso.com", but you can join... "contoso"! Which is really the same domain, of course, but the GUI won't stop you from joining because it thinks it is a different one. Saves you parting the domain if you like to use the GUI. –  Gomibushi May 22 '10 at 18:01
thanks its working now –  hossam alkhalili Jun 3 '10 at 7:32

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.