此工作站和主要網域間的信任關系失敗

  環境:

windows

異常狀況:

使用者更新完密碼後，用新密碼要登入電腦會出現"此工作站和主要網域間的信任關系失敗"。

沒接上網路，用舊密碼又可以登入。

解決過程:

1.先用舊密碼登入電腦。

2.接上網路。

3.在powershell執行
Test-ComputerSecureChannel -Repair -Credential (Get-Credential)

4.輸入具有權限的網域帳號及密碼。

如果執行後回傳 True，表示電腦與 AD 的 Secure Channel 已修復成功。

Environment

• Windows

• Active Directory Domain

Issue

After a user changes their Windows login password, they receive the following error when trying to log in with the new password:

"The trust relationship between this workstation and the primary domain failed."

However, if the computer is disconnected from the network, the user can still log in using the old password.

Cause

This usually indicates that the Secure Channel between the computer and the Active Directory domain controller has a problem.

When the computer is offline, Windows can use the cached old password to log in. However, when the computer is connected to the network, the new password needs to be verified with Active Directory, which results in the trust relationship error.

Solution

1. Log in to the computer using the old password.

2. Connect the computer to the company network.

3. Open PowerShell and run the following command:

Test-ComputerSecureChannel -Repair -Credential (Get-Credential)

4. Enter a domain account with sufficient permissions when prompted.

5. After the Secure Channel is repaired, try logging in again using the new password.

Note

If the command returns True, the Secure Channel between the computer and the Active Directory domain has been successfully repaired.