Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have taken over the management of several machines and domain at the place I work and think I have a corrupted domain "database" for lack of a better term.

When I try and log into the domain controller I get the error:

The security database on the server does not have a computer account for this workstation trust relationship.

All searching on this topic seems to relate to rejoining workstations to domains or spn data being wrong. I have tried to correct the SPN details but that didn't fix the issue. I'm not sure how I would go about rejoining a domain controller to a domain, it's not a viable fix for a dc in my books.

Any thoughts?

Also, another things I can login to this domain controller at the console in the first 15 seconds after reboot but if I wait any longer then I get the same message at the console.

At the moment I am using MMCs to manage the server remotely which works but I would like to resolve this issue.

share|improve this question

Sounds like something's seriously messed up with that DC - if possible, consider just rebuilding it.

Also check for the same basics that you'd check for another system with this issue - that it has working name resolution, that its name matches its computer account in the domain, and that it and the other domain controllers have correct time. And dcdiag is always worth a look.

Anyway, what you'd want to try for rebuilding the trust with the domain will be the procedure outlined here - stop the KDC service then run a netdom resetpwd against the DC to rebuild its computer account.

share|improve this answer
Heh, I know ... I'll end up rebuilding as I just don't trust it. Thanks for the other suggestions, I'll give the 'netdom resetpwd' a go. – JTew Nov 21 '11 at 7:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.