I am having a problem with a recently reinstalled laptop with Win 7 Enterprise. The computer is complaining about a broken trust relationship when I try to grant domain users local access on the machine.
I've done the following (twice, using a different name each time) and it doesn't resolve the issue:
- As domain administrator, leave domain and join workgroup: WORKGROUP.
- Reboot.
- As domain administrator, join domain using new computer name.
- Reboot.
- As domain administrator, add a domain user as local administrator.
- Error: "The trust relationship between this workstation and the primary domain failed."
This doesn't make any sense to me. As I understand it the above process is the appropriate way to fix this issue.
So far, other symptoms I've experienced are:
The client machine says it's unable to reach the domain. Meanwhile, on the server, I see EventID 5723 from NETLOGON:
The session setup from the computer [name_of_computer] failed because there is no trust account in the security database for this computer. The name of the account referenced in the security database is [name_of_computer]$.
An inability to to ping hosts by hostname when joined to the domain. When off the domain, I can ping hosts just fine.
nslookup [fqdn]
returns the proper value for both my domain controllers, and nsloookup [DC hostname]
returns the proper IP for the domain controller as well.
I've checked to see that the DNS servers are being assigned properly to the clients, and they are.
I also don't believe I have any WINS servers handing out incorrect NS information. Neither Domain Controller has that role installed (though if anyone has a definitive way to check for WINS servers, that might be helpful).
Can anyone provide some further troubleshooting steps?