Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Trust Failed
Trust Failed [message #405668] Fri, 05 March 2010 10:10 Go to next message
Slepland  is currently offline Slepland  Italy
Messages: 2
Registered: March 2010
Junior Member
hi all...

two days ago i encountered a trouble...

i have two server in my office (ad writable, same domain)...

everything was fine since when,two days ago, i get the error " the trust
between this workstation and the primary server cannot be established" or
something like that, because error is in italian...

i cannot log on any pc in my office... the only way is to detach the
ethernet and log being disconnected from server, and then plug in the
network again..

once i do that i can access the pc and but can access only one of the two
server...

what does this mean? have i to rejoin all pc to the domain? and if i do
that, i will loose all the user's settings on all the pc?

what could i do to resolve? any help would be appreciated.. many thx

Livio
Re: Trust Failed [message #405756 is a reply to message #405668] Fri, 05 March 2010 12:35 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Slepland,

Please make sure that you use only the domain DNS server on the NIC. Are
your machines created from an image that isn't sysprepped? On th DC run the
support tools dcdiag /v, netdiag and repadmin /showrepl to check for errors,
therefore install the support\tools\suptools.msi from the Windows server
2000/2003 installation disk.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> hi all...
>
> two days ago i encountered a trouble...
>
> i have two server in my office (ad writable, same domain)...
>
> everything was fine since when,two days ago, i get the error " the
> trust between this workstation and the primary server cannot be
> established" or something like that, because error is in italian...
>
> i cannot log on any pc in my office... the only way is to detach the
> ethernet and log being disconnected from server, and then plug in the
> network again..
>
> once i do that i can access the pc and but can access only one of the
> two server...
>
> what does this mean? have i to rejoin all pc to the domain? and if i
> do that, i will loose all the user's settings on all the pc?
>
> what could i do to resolve? any help would be appreciated.. many thx
>
> Livio
>
Re: Trust Failed [message #405774 is a reply to message #405668] Fri, 05 March 2010 13:10 Go to previous messageGo to next message
Santhosh Sivarajan  is currently offline Santhosh Sivarajan
Messages: 110
Registered: July 2009
Senior Member
Is Vista or Windows 7? Check the ServicePrincpleName (SPN) on the
workstation. You can use ADSI edit to see this value..

--
Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA
Houston, TX
http://blogs.sivarajan.com/
http://publications.sivarajan.com/

This posting is provided "AS IS" with no warranties, and confers no rights.


"Slepland" <slepland@Italianvampires.it> wrote in message
news:Xns9D32BA11A40BsleplandatItalianvam@207.46.248.16...
> hi all...
>
> two days ago i encountered a trouble...
>
> i have two server in my office (ad writable, same domain)...
>
> everything was fine since when,two days ago, i get the error " the trust
> between this workstation and the primary server cannot be established" or
> something like that, because error is in italian...
>
> i cannot log on any pc in my office... the only way is to detach the
> ethernet and log being disconnected from server, and then plug in the
> network again..
>
> once i do that i can access the pc and but can access only one of the two
> server...
>
> what does this mean? have i to rejoin all pc to the domain? and if i do
> that, i will loose all the user's settings on all the pc?
>
> what could i do to resolve? any help would be appreciated.. many thx
>
> Livio
Re: Trust Failed [message #405926 is a reply to message #405774] Fri, 05 March 2010 17:06 Go to previous messageGo to next message
Slepland  is currently offline Slepland  Italy
Messages: 2
Registered: March 2010
Junior Member
"Santhosh Sivarajan" <santhosh@online.ss-infrastructure.com> wrote in
news:4820FB53-C33B-4BF4-AD3D-C98EB467B74A@microsoft.com:

> Is Vista or Windows 7? Check the ServicePrincpleName (SPN) on the
> workstation. You can use ADSI edit to see this value..
>

i run the utilities u says, but they give me just a so long report that i
cannot read it beacause a half disappeared...

i have 2 2008 server, and the workstations are mixed between Vista and 7
....
Re: Trust Failed [message #406522 is a reply to message #405926] Sat, 06 March 2010 19:31 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Slepland" <slepland(at)italianvampires.it> wrote in message news:Xns9D33C801D22Bsleplandatitalianvam@207.46.248.16...
> "Santhosh Sivarajan" <santhosh@online.ss-infrastructure.com> wrote in
> news:4820FB53-C33B-4BF4-AD3D-C98EB467B74A@microsoft.com:
>
>> Is Vista or Windows 7? Check the ServicePrincpleName (SPN) on the
>> workstation. You can use ADSI edit to see this value..
>>
>
> i run the utilities u says, but they give me just a so long report that i
> cannot read it beacause a half disappeared...
>
> i have 2 2008 server, and the workstations are mixed between Vista and 7
> ...


You can run the tools that Meinolf suggested using the following method to save the results to a text file:

dcdiag /v > c:\dcdiag.txt
netdiag /v > c:\netdiag.txt
repadmin /showrepl > c:\repadmin.txt

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.
Re: Trust Failed [message #406529 is a reply to message #406522] Sat, 06 March 2010 19:43 Go to previous messageGo to next message
Santhosh Sivarajan  is currently offline Santhosh Sivarajan
Messages: 110
Registered: July 2009
Senior Member
Hi Ace,

Based on his description, the issue is not the domain trust. issues is the
trust between workstation and domain (secure channel). Easy fix is to add
SPN value back to the workstation. That is the reason I asked him to check
the SPN value using ADSI edit. I believe that workstation is missing the
SPN value for his Domain.


--
Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA
Houston, TX
http://blogs.sivarajan.com/
http://publications.sivarajan.com/

This posting is provided "AS IS" with no warranties, and confers no rights.


"Ace Fekay [MVP-DS, MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
news:u#iR$4ZvKHA.796@TK2MSFTNGP05.phx.gbl...
> "Slepland" <slepland(at)italianvampires.it> wrote in message
> news:Xns9D33C801D22Bsleplandatitalianvam@207.46.248.16...
>> "Santhosh Sivarajan" <santhosh@online.ss-infrastructure.com> wrote in
>> news:4820FB53-C33B-4BF4-AD3D-C98EB467B74A@microsoft.com:
>>
>>> Is Vista or Windows 7? Check the ServicePrincpleName (SPN) on the
>>> workstation. You can use ADSI edit to see this value..
>>>
>>
>> i run the utilities u says, but they give me just a so long report that i
>> cannot read it beacause a half disappeared...
>>
>> i have 2 2008 server, and the workstations are mixed between Vista and 7
>> ...
>
>
> You can run the tools that Meinolf suggested using the following method to
> save the results to a text file:
>
> dcdiag /v > c:\dcdiag.txt
> netdiag /v > c:\netdiag.txt
> repadmin /showrepl > c:\repadmin.txt
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
> MCSA 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
> Microsoft MVP - Directory Services
>
> If you feel this is an urgent issue and require immediate assistance,
> please contact Microsoft PSS directly. Please check
> http://support.microsoft.com for regional support phone numbers.
>
Re: Trust Failed [message #407149 is a reply to message #406529] Sun, 07 March 2010 23:43 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Santhosh Sivarajan" <santhosh@online.ss-infrastructure.com> wrote in message news:eU5s1$ZvKHA.4636@TK2MSFTNGP06.phx.gbl...
> Hi Ace,
>
> Based on his description, the issue is not the domain trust. issues is the
> trust between workstation and domain (secure channel). Easy fix is to add
> SPN value back to the workstation. That is the reason I asked him to check
> the SPN value using ADSI edit. I believe that workstation is missing the
> SPN value for his Domain.
>

I had to go back and re-read the original post. Now I see what you mean. If it's just one workstation, other than disjoiing/rejoining, updating the SPN value will be easier. Now if it's happening to more than one workstation, that would be a little more cause for alarm and may indicate a DNS misconfiguration and/or using an ISP's DNS, among other things.

Maybe an ipconfig /all from a DC and the workstation would help us eliminate basic issues.

Ace
Previous Topic:Applying group policy only to members of a domain local security group
Next Topic:WINS question
Goto Forum:
  


Current Time: Fri Jan 19 00:43:51 MST 2018

Total time taken to generate the page: 0.03327 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software