Electric Dreams

Windows 7 RC Failed Trust Relationship

No, I haven’t had a falling out with Windows 7, we’re still friends. But, I did have a little problem I needed to solve that left me unable to log in. I’m using Windows 7 RC in a Small Business Server domain with Active Directory, I guess this would apply equally to any network with a domain controller.

This problem occurred after a failed attempt to install SQL Server 2008 Express and using System Restore to roll back the install. After System Restore has done its stuff, when attempting to log in I was presented with the error message:

Windows could not log you in. The trust relationship between this computer and the primary domain failed.

This also logs a NETLOGON event 3210 in the system event log. The standard advice is to leave the domain and re-join it, but I found a quicker way, provided you have access to a domain account that has permission to join computers to the domain (you would need that anyway to follow the standard advice of leaving and re-joining the domain). In my technique, you don’t leave the domain – you just re-join it. This saves you a reboot and possibly the need to backup and restore your user profile.

1. Unplug the network cable.
2. You should now be able to log in with cached credentials.
3. Reconnect the network cable and verify that you can ping the domain controller.
4. Click Start and right click Computer, select Properties from the menu.
5. In the section titled Computer Name, Domain and Workgroup Settings, click the Change Settings link. Respond to the UAC prompt.
6. In the System Properties dialog, click the Network ID… button.
7. The default option will be This Computer is part of a Business Network. Leave it selected and click Next.
8. My company uses a network with a Domain. Next. Next.
9. Type in valid domain credentials that have permissions to join a computer to the domain. You should receive confirmation that the computer account has been found. Respond that Yes, you do want to use it.
10. On the next screen, you’ll be asked if you want to add a domain user account. You don’t need to because it’s already present and you’re logged into it, so respond Do not add a domain user account.
11. The next screen reminds you that you have to restart the computer. Click Next then Finish, and OK on the System Properties dialog. At the dialog, select Restart Now.

Share this post: | | |