topic Re: TRUST RELATIONSHIP QUESTION in Windows Server 2003

TRUST RELATIONSHIP QUESTION

Mario Gaztambide — Wed, 08 Oct 2008 19:06:13 GMT

Recently upgraded to Windows Server 2003 R2.
I continually get this message on Event Viewer/system. Can this be resolved?

Thank You

The computer COMP1 tried to connect to the server \\SERVER using the trust relationship established by the DOMAIN1 domain. However, the computer lost the correct security identifier (SID) when the domain was reconfigured. Reestablish the trust relationship.

Re: TRUST RELATIONSHIP QUESTION

Pieter 't Hart — Thu, 09 Oct 2008 06:04:38 GMT

wich computer did you upgrade?
COMP1, SERVER or any domaincontroller in DOMAIN1?
Did you do an upgrade or a fresh install?

I assume you did a fresh install of COMP1?
I assume only one is domaincontroller? (not a real trust between two domains).

The message indicates the SID (Security IDentifier) of the computer has changed.
This SID is also used for the computer-account in the domain

- If COMP1 was member of the domain : remove it from the domain (make it member of another workgroup).
- on the domain in users and computers check for the computer-account of COMP1 and if it still exists remove it.
- if the computer has registered itself with DNS/WINS and secure-updates are set, remove the entries (in DNS also the SID is used).
- readd COMP1 computer as a domainmember.
or readd COMP1 to the workgroup DOMAIN1.

Pieter

Re: TRUST RELATIONSHIP QUESTION

Jon Finley — Fri, 17 Oct 2008 21:59:36 GMT

You can use NETDOM to either repair/reestablish the trust, or reset the computer password between the two.

NETDOM /?

NETDOM TRUST

NETDOM RESET

Jon