+ Post New Thread
Page 1 of 4 1234 LastLast
Results 1 to 15 of 47
Windows 7 Thread, trust relationship in Technical; Afternoon all, Has anyone got a permanent fix for this please: "The trust relationship between this workstation and primary domain ...
  1. #1
    MrPstv's Avatar
    Join Date
    Jun 2007
    Location
    Birmingham
    Posts
    275
    Thank Post
    33
    Thanked 13 Times in 9 Posts
    Rep Power
    18

    trust relationship

    Afternoon all,

    Has anyone got a permanent fix for this please:
    "The trust relationship between this workstation and primary domain failed."

    I know it's a matter of re-connecting to the domain.
    This happens on a regular basis with our netbooks and trawling through the tintaweb i came across an article which advises disabling system restore via group policy.

    Has anyone experienced this same problem and if they did how did you resolve it?

    Thanks yall

  2. #2
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,505
    Thank Post
    10
    Thanked 508 Times in 445 Posts
    Rep Power
    116
    bcdedit /set {default} recoveryenabled No
    bcdedit /set {default} bootstatuspolicy ignoreallfailures

    from an elevated command prompt.

    Edit: Stops the startup repair from running on a failed boot
    Last edited by DMcCoy; 11th October 2013 at 05:19 PM.

  3. 4 Thanks to DMcCoy:

    hallb15 (12th March 2014), kevrage (13th March 2014), MrPstv (14th October 2013), TheMrB (14th October 2013)

  4. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,376
    Thank Post
    906
    Thanked 1,811 Times in 1,559 Posts
    Blog Entries
    12
    Rep Power
    468
    Quote Originally Posted by DMcCoy View Post
    bcdedit /set {default} recoveryenabled No
    bcdedit /set {default} bootstatuspolicy ignoreallfailures

    from an elevated command prompt.

    Edit: Stops the startup repair from running on a failed boot
    @DMcCoy is bang on the money, fixed it for us!

  5. #4
    free780's Avatar
    Join Date
    Sep 2012
    Posts
    1,087
    Thank Post
    47
    Thanked 88 Times in 83 Posts
    Rep Power
    23
    I thought you just reset the computer password in AD.

  6. #5

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,689
    Thank Post
    756
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    You can use netdom to reset the machine account password rather than disjoin and rejoin but the way to stop it in the first place is to disable the startup repair.

    Ben

  7. #6
    mhundley's Avatar
    Join Date
    Oct 2007
    Location
    Worcester
    Posts
    47
    Thank Post
    11
    Thanked 8 Times in 7 Posts
    Rep Power
    16
    I am making an assumption here but I believe you may be deploying using MDT.

    If you are using MDT 2012 Update 1 it includes a section in the task sequence called Install Windows Recovery mode (WinRE) or words to that effect, this is the bit which installs the startup mode on your clients.

    We found this hapening in many schools, every time it was on Netbooks or laptops which were not being shut down properly, because Windows is detecting the dirty shutdown it sets the repair mode to be the default which in turn attempts to restore to a recovery point, the machine password stored here is not current, or even the previous one for the machine, either of which will work on a domain.

    Since removing this entry from our task sequences we have seen a much smaller number of reports of this, presumably it is happening on machines we have not rebuilt with the new task sequence.

  8. Thanks to mhundley from:

    TheMrB (14th October 2013)

  9. #7

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,521
    Thank Post
    1,532
    Thanked 2,639 Times in 1,827 Posts
    Rep Power
    814
    We dont deploy using MDT and it happens all the time here. It has improved since there are notices everywhere telling the children to shut down properly but we still get a few.
    I am very interested in the fix and will try it as soon as I can! Thanks

  10. Thanks to witch from:

    vortex999 (11th February 2014)

  11. #8
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,127
    Thank Post
    772
    Thanked 176 Times in 159 Posts
    Blog Entries
    78
    Rep Power
    86
    Quote Originally Posted by witch View Post
    We dont deploy using MDT and it happens all the time here. It has improved since there are notices everywhere telling the children to shut down properly but we still get a few.
    I am very interested in the fix and will try it as soon as I can! Thanks
    I've got a script which will stop this for you, just be careful you don't use bitlocker as this will cause it to get upset. Will post later when I've remoted in to get it.

  12. Thanks to TheScarfedOne from:

    witch (11th October 2013)

  13. #9
    free780's Avatar
    Join Date
    Sep 2012
    Posts
    1,087
    Thank Post
    47
    Thanked 88 Times in 83 Posts
    Rep Power
    23
    Quote Originally Posted by mhundley View Post
    I am making an assumption here but I believe you may be deploying using MDT.

    If you are using MDT 2012 Update 1 it includes a section in the task sequence called Install Windows Recovery mode (WinRE) or words to that effect, this is the bit which installs the startup mode on your clients.

    We found this hapening in many schools, every time it was on Netbooks or laptops which were not being shut down properly, because Windows is detecting the dirty shutdown it sets the repair mode to be the default which in turn attempts to restore to a recovery point, the machine password stored here is not current, or even the previous one for the machine, either of which will work on a domain.

    Since removing this entry from our task sequences we have seen a much smaller number of reports of this, presumably it is happening on machines we have not rebuilt with the new task sequence.
    I thought mdt disabled sr by default in the answer file.

  14. #10

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,376
    Thank Post
    906
    Thanked 1,811 Times in 1,559 Posts
    Blog Entries
    12
    Rep Power
    468
    Quote Originally Posted by TheScarfedOne View Post
    I've got a script which will stop this for you, just be careful you don't use bitlocker as this will cause it to get upset. Will post later when I've remoted in to get it.
    If you bit locker after running it is all ok?

  15. #11
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,127
    Thank Post
    772
    Thanked 176 Times in 159 Posts
    Blog Entries
    78
    Rep Power
    86
    Quote Originally Posted by FN-GM View Post
    If you bit locker after running it is all ok?
    Yes, it's only if you start the bitlocker process first = issues as it's a mod to the bootloader

  16. #12

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,376
    Thank Post
    906
    Thanked 1,811 Times in 1,559 Posts
    Blog Entries
    12
    Rep Power
    468
    Quote Originally Posted by TheScarfedOne View Post
    Yes, it's only if you start the bitlocker process first = issues as it's a mod to the bootloader
    Thought so, just double checking

    Thanks

  17. #13

    Join Date
    Nov 2011
    Location
    Cambridgeshire
    Posts
    561
    Thank Post
    158
    Thanked 81 Times in 71 Posts
    Rep Power
    25
    Our machines are imaged with FOG and I've had this issue quite a number of times - usually I clusters from the same classroom, so I guessed it was something triggered by user behaviour.

    I have disabled machine password changes on the laptops that have encountered the problem (suggested on another thread on here) and I haven't had any of the "treated" machines back. This sounds like a better solution. If I continue using FOG (MDT is a learning project for me ATM ), will disabling the system recovery using the cmd prompt instructions in dmccoys post on my master machine cure the problem going forwards?

  18. #14
    MrPstv's Avatar
    Join Date
    Jun 2007
    Location
    Birmingham
    Posts
    275
    Thank Post
    33
    Thanked 13 Times in 9 Posts
    Rep Power
    18
    Quote Originally Posted by DMcCoy View Post
    bcdedit /set {default} recoveryenabled No
    bcdedit /set {default} bootstatuspolicy ignoreallfailures

    from an elevated command prompt.

    Edit: Stops the startup repair from running on a failed boot
    How would you guys apply this over 90 netbooks? Group policy?

  19. Thanks to MrPstv from:

    Ed_Pinkman_13 (6th February 2014)

  20. #15


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,059
    Thank Post
    232
    Thanked 926 Times in 795 Posts
    Rep Power
    309
    Quote Originally Posted by MrPstv View Post
    How would you guys apply this over 90 netbooks? Group policy?
    batch file as a startup (not logn) script

    Code:
    if exist c:\suroff.txt goto end
    bcdedit /set {default} recoveryenabled No
    bcdedit /set {default} bootstatuspolicy ignoreallfailures
    copy \\server\share$\suroff.txt c:\suroff.txt
    
    :end

  21. 4 Thanks to sted:

    gavins38 (24th January 2014), glen_j (27th January 2014), madurham (21st January 2014), MrPstv (14th October 2013)



SHARE:
+ Post New Thread
Page 1 of 4 1234 LastLast

Similar Threads

  1. Windows 7 Trust relationship
    By Sunderwood in forum Windows 7
    Replies: 35
    Last Post: 14th March 2012, 02:56 PM
  2. Trust relationship error on Windows 7
    By techie08 in forum Windows 7
    Replies: 41
    Last Post: 22nd September 2011, 02:40 PM
  3. Rebuilt server - now lacking trust relationships!!!
    By InspireICT in forum Wireless Networks
    Replies: 13
    Last Post: 3rd May 2011, 02:41 PM
  4. Trust Relationship for web traffic
    By ahunter in forum Wireless Networks
    Replies: 4
    Last Post: 11th November 2008, 06:34 PM
  5. Trust Relationships and DeepFreeze
    By AdamWilden in forum How do you do....it?
    Replies: 6
    Last Post: 4th February 2008, 12:16 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •