Ways to Fix Active Directory Trust Relationship Issues

Ways to Fix Active Directory Trust Relationship Issues

Method 1: Disjoin & Rejoin Domain (dsjoin)

1. Log in as local admin.
2. Run: dsjoin /leave (to disjoin).
3. Restart, then rejoin:
   dsjoin /domain DomainName /userD DomainAdminUser /passwordD *
4. Restart again.

Method 2: Repair Trust via PowerShell

1. Log in as local admin.
2. Run:
   Test-ComputerSecureChannel -Repair -Credential DomainName\Administrator
3. Restart.

Method 3: Reset Computer Password (PowerShell)

1. Log in as local admin.
2. Run:
   Reset-ComputerMachinePassword -Server DomainServer -Credential DomainName\Administrator
3. Restart.

Method 4: Reset Secure Channel (Netdom)

1. Log in as local admin.
2. Run:
   netdom resetpwd /Server:DomainController /UserD:DomainAdmin /PasswordD:*
3. Restart.

Method 5: Delete & Recreate Computer in AD

1. Delete the computer object from Active Directory Users & Computers (ADUC).
2. Log in as local admin.
3. Run:
   Remove-Computer -UnjoinDomainCredential DomainName\Administrator -PassThru -Verbose
4. Restart & rejoin using:
   Add-Computer -DomainName “DomainName” -Credential DomainName\Administrator -Restart

Method 6: Check & Sync Time

1.  Log in as local admin.
2. Run:
   w32tm /resync
3. If needed, manually set time sync:
   w32tm /config /manualpeerlist:”time.windows.com” /syncfromflags:manual /update
4. Restart.

 

 

Ref : https://www.linkedin.com/posts/iampankajschandel_ad-dc-domaincontroller-activity-7295512865875062784-pPwP?utm_source=share&utm_medium=member_desktop&rcm=ACoAABE1sM0B-FTqL8bSMFjcus01O-GeM0CgLpg