Odd domain trust issues
Ok, I have some very strange problems that I haven't been able to solve despite extensive googling (sorry Bing). First a little background. I upgraded to Windows 2008 when it came out. I set up a second server and joined it to the domain. When I tried to upgrade the original server, I managed to screw it up and decided to just leave the one server for now. I made sure all the roles were assigned properly to the new server, but I did have to do a little cleanup as not everything was removed in AD from the old server. I just installed Windows 7 ultimate 64 bit on my PC, and I can't get it to join the domain. At first it looks good, and says Welcome to the **** domain. When I hit "Ok", I get an error Changing the Primary Domain DNS name of this computer to "" failed. The name will remain <mydomain>.local. The rror was: The remote procedure call failed and did not execute. If I try to reboot the computer and log in, I get an error that says "The security database on the server does not have a computer account for this workstation trust relationship. Ok, so I did a lot of research and digging, and I did find that the servicePrincipalName doesn't get set when the computer account is created. I went ahead and manually set the servicePrincipalName, and then when I tried to log in I'd get the error "The trust relationship between this workstation and the primary domain failed". If I remove the computer from the domain and re-add it, the same thing happens. The computer account is created without a servicePrincipalName and I'm unable to log in. My gut feeling is that it's some kerberos issue with my computer not authenticating with the domain controller properly, but if so, I don't know how to troubleshoot or fix it. I have disabled all GPO on the domain for troubleshooting as some people reported issues with it and DNS names appended, but even with all custom GPO disabled I have the problem. I've also thought it might be a bad copy of Windows (msdn download and burned to DVD), although I'm not quite ready to redownload, reburn, and try again as I already have so much work into building my good 64 bit image here. I don't have any trouble connecting to file shares on the DC, although it requires me to log in with my domain credentials. I haven't had any troubles joining Windows 7 x86 computers to the domain, it's just this one 64 bit. I'm completely mystified here. Any ideas or suggestions I could try?
March 11th, 2010 7:44am

Hi, after checking the issue, it seems this is a general Windows Server related issue. As this forum focuses on Windows 7 specific issues, this inquiry would best be posted to Windows Server forum: http://social.technet.microsoft.com/Forums/en-US/category/windowsserverThe reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.Sean Zhu - MSFT
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2010 6:06am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics