Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i got this message when i try to login the file server "the trust relationship between this workstation and the primary domain failed "

can anyone help me


share|improve this question

Probably the workstation account password has come out of sync or has become corrupted.

Basically you have re authenticate with the domain, in other words, rejoining the domain.

I refer you to this KB with more details on how to verify if this is the problem, and how to solve it.

share|improve this answer
What KB? – Chris S May 20 '10 at 17:09
So sorry, I messed up the link. You probably googled it up already, but here it is: - also relevant: – Gomibushi May 22 '10 at 17:59
NEW version of link: – Warren P Apr 1 '13 at 13:55

Another reason for this error may be the system time difference on both machines. If they differ too much (think 2 hours or more) authentication fails

share|improve this answer
thanks this working now – hossam alkhalili May 10 '10 at 8:03
If time differs more than 5 minutes, kerberos breaks. – MDMarra Nov 15 '12 at 17:54

This KB also applies.

share|improve this answer

Sorry i know my response is late but sometimes if you have two domain controllers and the bdc does not sync with the pdc this happens.temp solution is to stop AD services on the BDC long term solution fix the syncing issue.

share|improve this answer

on your workstation, unjoin from domain - restart, add it to workgroup then restart on the server - in active directory users and computers, delete the computer account

then on the workstation, re-join to the domain.

share|improve this answer
You only need to unjoin (it'll force you to join a workgroup at the same time), reboot, reset the computer account on the domain, then rejoin the domain. No deleting necessary, no restarting the server! – Chris S May 20 '10 at 17:11
A trick I've noticed (works for me at least) is to rejoin the domain by stipping the tld. So for a "" joined computer, you can't join "", but you can join... "contoso"! Which is really the same domain, of course, but the GUI won't stop you from joining because it thinks it is a different one. Saves you parting the domain if you like to use the GUI. – Gomibushi May 22 '10 at 18:01
thanks its working now – hossam alkhalili Jun 3 '10 at 7:32

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.