Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My computer account was accidentally deleted from Active Directory, when I try to logon to my Windows 7 PC I get the message "the trust relationship between this workstation and the primary domain failed" and I can't logon. In Windows 7 the local admin account is disabled by default, there is one other local account that is a standard user and doesn't have permission to disjoin the domain or enable the admin account.

I'm now in the position where I can't logon using my main PC and I can't disjoin the domain. Can I restore the trust relationship at the server end? I really don't want to resinstall!

Just to recap I can't logon to this PC as any user other than the standard local user who has no permissions to disjoin the domain or add/remove users. Is there anything I can do?

Many thanks to anyone who can help.

share|improve this question

closed as off-topic by MDMarra, mdpc, Ward, Dave M, kce Oct 4 '13 at 16:38

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions must be relevant to professional system administration. Server Fault is a site dedicated to professionals; novice questions are off-topic. Please see the Help Center for more information on topicality. The best advice we can give you is to hire a professional to help you out." – MDMarra, mdpc, Ward, Dave M, kce
If this question can be reworded to fit the rules in the help center, please edit the question.

add comment

3 Answers

If you have logged on as a domain admin recently then you can pull out the network cable and log on with the cached credentials, then enable a local admin to unjoin/rejoin.

share|improve this answer
add comment

Use NT Offline to enable the local admin and blank out the password http://pogostick.net/~pnh/ntpasswd/
After you do that, just login as local admin and rejoin the domain

The only other option is to restore the computer account from backup. If you had BackupExec with the Active Directory add-on, this would be easy. If not, a system restore would do it but it'd be much riskier than just rejoining the computer to the domain after resetting the password.

share|improve this answer
    
Quest's AD Recovery Manager or any of the other AD recovery tools can do this fairly well, too. –  K. Brian Kelley Jul 22 '10 at 17:25
add comment

Have you tried booting into safe mode? Usually, the administrator account doesn't require a password in that instance. To get into safe mode, hold in F8 until you get the boot menu, and select 'Safe Mode with Networking'

share|improve this answer
add comment

protected by Tom O'Connor Oct 4 '13 at 13:11

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?