Single Forest Single Domain Windows 2008 R2 Domain Controllers Windows 2003 R2 Domain Controllers AD Integrated DNS No WINS The below error began within 1 hour of introducing the first Windows 2008 R2 domain controller into this forest/domain. Windows 7 and Windows 7 SP1 workstations continuously get this error: The security database on the server does not have a computer account for this workstation trust relationship Occurs During: First Boot Up Bringing workstation out of screen saver. Waking workstation with hibernation active Waking workstation with hibernation inactive Warm reboots Cold reboots Whether we use a sysprepped image OR build the workstation manually from CD Affects Desktops, Laptops and Servers Different things we have tried that have not resolved this issue resulting in the return of the above error (executed as local admin and/or enterprise admin): Disjoin, delete the computer account, rejoin the workstation. Right clicked in the computer account in ADUC and chose RESET. Switched the primary and secondary DNS servers on the workstations. Used two DNS servers within the same Subnet. Used two DNS server in dissimilar Subnets. DisablePWDChange set to 1. MaxPWDAge set to 999 nltest /sc_change_pwd:<domain> netdom.exe resetpwd /s:<domain controller> /ud:<domain>\<domain account> /pd:<domain account password> Test-ComputerSecureChannel -Repair -Verbose Re-set and re-configured the authoritive time server for the forest. Flushed DNS on all workstations. Rotated the FSMO roles to different DCs, different Sites, different Subnets, different physical locations. Tested, re-tested and verified AD Replication is healthy and reports successful during every test at different hours of the day/night. Enabled all encryption types via a GPO and verified the workstations are receiving GPO assignments. (DES, RC4, AES, etc, etc) Set the network Provider Order on all workstations to have Microsoft Windows Networks on top. Searched for duplicate SPNs and found none. Uninstalled all anti-virus and anti-malware software from a series of workstations for testing. Updated to the latest NIC card drivers. Enabled PORTFAST on the routers connected to Windows 7 workstations. Moved workstations to different Organizational Units and hierarchies in ADUC. JoeWare Mahcine Tool. Windows Firewall is OFF. Browser Service verified to be running. The above list is not everything weve tried so far, but you get the idea. Does anyone have a suggestion on how to fix this issue ? Thanks in advance. YRG2

Have you seen similar thread has been discussed in our forum earlier. http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/eb0b6761-d468-4dc1-a90a-451ae78d409b/ Regards, Ravikumar P

Hello, have you check with the support tools that the DCs have replicated correct? Please UPLOAD the following files so we can verify some settings: ipconfig /all >c:\ipconfig.txt [from each DC/DNS Server and one client with problems] dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) ADREPLSTATUS http://www.microsoft.com/en-us/download/details.aspx?id=30005 can also be exported to file. As the output will become large, DON'T post them into the thread, please use Windows Sky Drive (skydrive.live.com) [with open access!] and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB. Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Have you seen similar thread has been discussed in our forum earlier. http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/eb0b6761-d468-4dc1-a90a-451ae78d409b/ Regards, Ravikumar P