Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My computer account was accidentally deleted from Active Directory, when I try to logon to my Windows 7 PC I get the message "the trust relationship between this workstation and the primary domain failed" and I can't logon. In Windows 7 the local admin account is disabled by default, there is one other local account that is a standard user and doesn't have permission to disjoin the domain or enable the admin account.

I'm now in the position where I can't logon using my main PC and I can't disjoin the domain. Can I restore the trust relationship at the server end? I really don't want to resinstall!

Just to recap I can't logon to this PC as any user other than the standard local user who has no permissions to disjoin the domain or add/remove users. Is there anything I can do?

Many thanks to anyone who can help.

share|improve this question

closed as off-topic by MDMarra, mdpc, Ward, Dave M, kce Oct 4 '13 at 16:38

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions must be relevant to professional system administration. Server Fault is a site dedicated to professionals; novice questions are off-topic. Please see the Help Center for more information on topicality. The best advice we can give you is to hire a professional to help you out." – MDMarra, mdpc, Ward, Dave M, kce
If this question can be reworded to fit the rules in the help center, please edit the question.

If you have logged on as a domain admin recently then you can pull out the network cable and log on with the cached credentials, then enable a local admin to unjoin/rejoin.

share|improve this answer

Use NT Offline to enable the local admin and blank out the password
After you do that, just login as local admin and rejoin the domain

The only other option is to restore the computer account from backup. If you had BackupExec with the Active Directory add-on, this would be easy. If not, a system restore would do it but it'd be much riskier than just rejoining the computer to the domain after resetting the password.

share|improve this answer
Quest's AD Recovery Manager or any of the other AD recovery tools can do this fairly well, too. – K. Brian Kelley Jul 22 '10 at 17:25

Have you tried booting into safe mode? Usually, the administrator account doesn't require a password in that instance. To get into safe mode, hold in F8 until you get the boot menu, and select 'Safe Mode with Networking'

share|improve this answer

protected by Tom O'Connor Oct 4 '13 at 13:11

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?