Re: Trust Relationship error

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



If you are intentionally disabling the Admin account (Not the password as
you mentioned) I would suggest you create a new account elevate it to be an
admin and create a strong password on it. You should have some way to gain
access to the machine in the event of an error such as what you are
experiencing.

Not sure if there is a third party tool to enable an account, but there are
tools to change a forgotten password.

The loss of the domain connection is tough to provide you much (If any)
info, since you haven't given any details such as event logs. Did any
events recently occur? Are you sure you have full connectivity with your
enterprise? This kind of sounds like a dc was lost and an improper recovery
at a site, or something a long those lines.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Peter F" <PeterF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A3D81E4B-6135-4070-AB68-45D3B6ED087E@xxxxxxxxxxxxxxxx
Hi,

Please could someone help.

We have an overseas rollout programme and recently while abroad had to
rebuild 19 machines which were shipped and originally built back in the UK
because of an error "trust relationship between this workstation and the
primary domain failed", in addition to this we don't know what the cached
account is and therefor have to totally rebuild these machines from the
local
DC as we are unable to logon to the domain. Essentially these machines
become
"BRICKS".

Does anyone know why in the first instance this is happening, and is there
anyway in which we could logon to the PC (BTW the admin password also gets
disabled during the build before being shipped over) in order to attempt
to
take the machine out of the domain and then rejoin?

Any information would be greatly appreciated.

Regards.
--
Flinty


.



Relevant Pages

  • RE: local admin account password
    ... ease of use this provides you could change the account ... >> remotely patch all machines on that LAN. ... >> DCs diff admin password ...
    (Focus-Microsoft)
  • Re: Local administratotor rights on target machines
    ... Your users X can be a limited account in the domain, ... an admin on a selected set of client machines. ... I gave X more privileges than required. ...
    (microsoft.public.windows.group_policy)
  • RE: 2K Server locking 98 users out
    ... Since it is happening only on 98 machines, that makes me think of the ... Windows Password. ... list trying to guess or brute force a password, this could lead to account ... I am domain admin on a 2K server serving about 60 users. ...
    (Focus-Microsoft)
  • Re: Demoting users from admin to limited
    ... I have several XP Pro machines deployed at my small company's site ... Administrator, XP will not allow me to demote all accounts to limited. ... You can't change yourself to limited because you're using your account. ... the Safe Mode admin account instead to make your own admin account limited. ...
    (microsoft.public.windowsxp.basics)
  • Re: Incoming E-Mail - cant create contact in OU
    ... central admin pool different than the web app. ... that account a little (if the web app is compromised or something, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)