Fix Workstation Domain Trust

Problem

A workstation has a domain trust problem. Usually this means you can't log into it with non-cached credentials. Sometimes you have to use local credentials to get into it.

Solution

Usually one would remove the computer from the domain and then re-add it. But there's a better way.

Powershell 3 Method

> Reset-ComputerMachinePassword [-Credential ] [-Server ]

If you run this as a local administrator on the workstation without parameters, it should go off to the domain controller and re-set the credentials for the workstation to access the domain trust. You may have to enter the username/password of a users with permission to add/remove workstations from the domain. Reboot the local workstation and you should be good to go.

(I've personally done this on a workstation and it has worked for me.)

Non-Powershell Method

> netdom resetpwd /s:<server> /ud:<user> /pd:*

• server is a domain controller in the joined domain
• user is a DOMAINuser with rights to add/remove workstations from the domain.

Source