Skip to main content

How to fix Trust Relationship issue in Windows (without System Reboot)


Hello Readers, today we are going to learn how to Fix trust relationship issue between the workstation and the domain. But before jumping into the solution, we need to learn the concept of Secure channel.

What is a Secure Channel ?

Before understanding the trust relationship issue, you will need to know what is a Secure channel
  1. Whenever you add a computer or client machine to an Active Directory domain, your computer account gets created in Active Directory.
  2. Secure Channel helps to make the communication between the client machine and DC (Domain Controller), Example : Replicating Group Policies.
  3. Always remember in a Secure channel the computer authentication takes place and not the User Authentication
  4. So for this Authentication Password is required. Once computer is joined to the domain a password for authentication is proposed to the Active Directory
  5. By Default, Computer account password change is initiated by the client computer in every 30 days. This can be modified in Group Policy settings.
  6. NETLOGON Service is responsible for establishing the secure channel.

Why Trust Relationship issues occurs ?

Trust relationship issue occurs when the secure channel is not getting established between the Client computer and the Domain Controller. This can happen if the last recorded password in Active Directory doesn't match with the Local client computer password. 

By default there is no way to know what is the password. Only thing in your hand is to reset or re-establish the secure channel.

Examples when this can occur  :

1. You have reset your computer recently
2. You are trying to build new server from an OS Image which was joined to a domain previously
3. Rebuilding VM Files (.avhdx)
4. NetLogon service is not working properly

Ways to Fix Trust Relationship issue without doing reboot ?

Usually the below step also fixes this issue but only disadvantage is it requires system reboot.

Computer Properties > Add the computer to Workgroup > Reboot the system > and then Join the the computer back to the domain.

So the question arises how to fix this issue without doing System Reboot?

Step 1 ) Using Reset-ComputerMachinePassword

Reset-ComputerMachinePassword -Server "DC01" -Credential "<DomainAdminCreds>"

This command will only work on PowerShell 4.0 and 5.0 

Step 2 ) Using Test-ComputerSecureChannel

Test-ComputerSecureChannel -Repair -Credential "<DomainAdminCreds>"

Step 3 ) Reset Computer on ADUC

  • Login to Domain Controller
  • Open Active Directory Users and Computers (dsa.msc)
  • Search for the ComputerName and then Right click on it and then Reset.

Happy Learning!


Popular posts from this blog

Fast Proxy List with their Ports

TESTED :     Port 8080  INDIA           Port 8080  USA         Port 8080   USA                  Port 8080   USA         Port 8080   USA            Port 8080   USA           Port 8080  INDIA           Port 8080  INDIA       Port 8080  INDIA           Port 8080  INDIA             Port 8080  INDIA ANONYMOUS US PROXY SERVER :

How to hack VP-ASP Shopping websites and get all the Database details

Hello Friends, Today we are going to learn how to hack VP-ASP cart of a Shopping website and download all their Database details like Customer details, Credit card details, Product details etc. So some basic idea before starting the Tutorial,  What we are going to do here? Firstly we will hack a shopadmin website then we will download the database file which will be in the form of *.mdb. This database file contains all the client details like credit card information and also login name and passwords. How to do this ? Note : This tutorial is tested on "VP-ASP Shopping Cart Version:5.00" Step 1 : First thing to do is to find VP-ASP 5.00 Sites, to do this -> Go to -> Type "VP-ASP Shopping Cart 5.00"[ Without Quotes ] . See the image for reference  Step 2 : In this tutorial, we are going to target  You can also select your website which is having "shopdisplaycategories.asp","sho

Windows Services Startup Type Explained

Hi Geeks, Today I was working on a Service related script so thought of sharing some useful information related to Services Startup Type which most of the people knows but doesn’t know about the functionality. So lets begin. What are Windows Services and what they do ? Windows Services are the components or applications that starts when your computer is booted up and runs in the background mode helping the application to work smoothly and finally stops when the computer shuts down. For Example, If you want to send or receive any Fax, then the Fax service should be running in the background to perform the Fax activity. How many Service Startup Types are there and what they do ? There are 4 Service Startup Types available : 1. Automatic Explanation : Automatic Service Startup Type starts the service automatically when the system boot up is done. So if we are having a machine of less memory and there are lots of services in Automatic Startup type then your mac

How to see remote changes before doing Git Pull

Before going through the steps, lets first understand what is the purpose of GIT Pull ? In simple terms, GIT PULL is a GIT Command which access the Remote repository and checks which all files were modified or created and is different from the local repository. Once it finds that info, it downloads those file to your local repository.  Technically speaking, GIT Pull runs 2 commands i.e GIT Fetch and GIT Merge in background. GIT Fetch downloads the latest change to the local repository while GIT Merge merges the remote content refs and heads to new local merge commit. so you can say the below is same : GIT Pull <remote> -or- GIT Fetch <remote> GIT Merge origin/master So lets begin with the steps on how to see the remote (origin/master) changes before doing Git Pull :  Git fetch origin Git log master..origin/master Git diff master..origin/master Git pull / Git merge origin/master Happy Leaning! How to get started with GIT in Windows : Check out here

Powershell Tip : How to find the IP Address of a VM from a HyperV

Today we are going to see how to fetch the IPv4 Address details of a VM from a HyperVisor console. We will be using Powershell to achieve the same with a One-Liner code.  You can modify the Command as per your need. Our requirement is to check Only the Running VM's and  get the VM Name and its corresponding IPv4 Address. So lets get started. CODE (Execute in HyperV ): Get-VM | ? State -eq "Running" | select Name, @{l="IPv4Address";e={($_.NetworkAdapters.IPAddresses -match "(?<Address >((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?))")} } CODE DETAILS : 1. Get-VM : Fetches the VM List present on the HyperVisor 2. ? State -EQ "Running" : It is similar to Where-Object {$_.State -eq "Running"} , here we are using where-object to fetch only the Running VM list from the Pipeline. 3. NetworkAdapters properties of the VM Contains the IPAddresses information, we are using IPv4 address Regex to get

Powershell Tip : How to find the disk type of your System ( HDD or SSD )

Hi Friends😀 Today we are going to learn how to find the disk type of your system i.e. whether it is SSD ( Solid State Drive ) or HDD ( Hard Disk Drive ). Powershell has a cmdlet which helps to achieve the same :  Get-PhysicalDisk Get-PhysicalDisk | Select FriendlyName , MediaType , Size