Paul McCran's

Portfolio

UNABLE TO LOGIN TO YOUR CITRIX MASTER IMAGE - TRUST RELATIONSHIP FAILS

The Active Directory Computer object password is usually changed automatically within, I think 30 days. There are Group Policy or Registry settings that can be applied to disable the machine account password (I will post these details at a later date)

You may find yourself in a scenario where you are unable to login to your master image.  This could be because you have restored to a VM snapshot, at a point in time when the computer account password was different.  Your Citrix Master image is now showing this error when you login:

"The trust relationship between this workstation and the 

primary domain failed"

You attempt to rejoin this computer to the domain but find that you can't login as a local Administrator either, so what can be done here?  I patched together this solution from several online sources, referenced at the end of this posting.

1)   Boot the  VM with your Microsoft Windows Server 2008/2012 DVD
2)  From the Windows Setup menu, click “Next”.
3)  Select “Repair your computer”
4)  Under Choose and option, click on “Troubleshoot”.
5)  Under Advanced options, click “Command Prompt”.
6)  At the command prompt, run the following commands:
            
             D:
             cd windows\system32            
             ren Utilman.exe Utilman.exe.old             
             copy cmd.exe Utilman.exe

7)  Close the command prompt and then click “Continue”.
8)  The server should now boot and present the logon screen. Here click Windows Key + U. Or Click on 




9)  At the prompt you can now change the password, by typing the following command:
                  Powershell
                  Reset-ComputerMachinePassword -Server "yourdc" -Credential "yourdomain\yourusername"

    This will reset the machine account name on the domain and workstation.  Allowing you to login once more

    10)  Restart your server and once again, boot from the Microsoft Windows Server 2008/2012 DVD
    11)  From the Windows Setup menu, click “Next”.
    12)  Select “Repair your computer”
    13)  Under Choose and option, click on “Troubleshoot”.
    14)  Under Advanced options, click “Command Prompt”.
    15)  At the command prompt, run the following commands:
               

                 d:
                 cd windows\system32
                 ren utilman.exe utilman.exe.new
                 copy utilman.exe.old utilman.exe

    16)  Close the command prompt and then click “Continue”.
    17) Reboot, and login.  
    18) Makes changed to your master image, to disable the local machine password changes

    SOURCES:

    http://www.kieranlane.com/2013/09/18/resetting-administrator-password-windows-2012/
    http://blog.blksthl.com/2013/03/18/fix-the-trust-relationship-between-this-workstation-and-the-primary-domain-failed/









    Next PostNewer Post Previous PostOlder Post Home