Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a windows 2008 R2 standalone Domain Controller that I restored from backup. The original DC is offline.

When I log in with valid user credentials I get the error:

"The security database on the server does not have a computer account for this workstation trust relationship"

How can I log into the domain controller and fix whatever is broken? This is the only DC in the Forest.

For what it's worth, I'm hosting this server at Rackspace, so my physical options are limited.

share|improve this question
Can you log on with your local administrator account? Also, was this stand alone DC the same as the original DC? – ponsfonze Jul 27 '12 at 18:05
It is the same as the original DC. The original administrator account was renamed and disabled per security guidance. There is no local admin account (it's a DC) – LamonteCristo Jul 27 '12 at 18:06
You might have to use Active Directory Restore Mode to fix your OS, which may require a local logon. – ponsfonze Jul 27 '12 at 18:19
@ponsfonze There are no local accounts on Domain Controllers. – MDMarra Jul 27 '12 at 18:30
this is your real problem: "This is the only DC in the Forest." once you get through your current problem, fix this one. ALWAYS have at least 2 DC's. – longneck Jul 27 '12 at 18:53
up vote 12 down vote accepted

Active Directory Restore Mode is the only way, and it will require that you know the Directory Services Restore Mode administrator account password.

Incidentally, it looks like this problem was caused by improperly restoring a Domain Controller. Just doing a standard restore from backup will leave you with a non-functioning domain Controller every time. Next time, follow the technet guide here.

share|improve this answer

You can restart into Directory Service Restore Mode remotely and log in using the DSRM (local administrator) password.

If you do not know that password, you can reset it by booting your virtual machine from an ntpasswd image.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.