One computer keeps losing domain trust...

[Guest /u/The_Great_Sephiroth]

Okay, bear with me as this has me lost. I support many offices on an AD domain. One office has one PC that keeps losing its trust with the domain. Monday I wiped the PC (it was Windows 10) and loaded it fresh with Windows 11. No problems. I manually installed the correct drivers and all. Joined the domain. Used domain accounts. Used domain software. Tuesday it lost it's trust. I was able to repair it using Powershell. Just this morning it lost its trust.

 

Time is correct on the PC and the DC it talks to has the same time. No admins have used the PC, only normal users, so nobody could have changed anything that would cause this. I am lost as to why this keeps happening on one PC in the entire domain, over and over, even after having wiped the disk and installing a newer OS. I need to know WHY it is losing its trust, but nothing screams at me. Event logs appear to be normal.

 

How can I troubleshoot the cause of this?

 

Update:

 

I can login via the console session, either in-person or using our NinjaOne remote software, but if I use RDP (Remote Desktop Client) I get a network password error. In addition, if I view the profiles on the system, three are unknown, then you see the local admin account, our local backup account, and my domain account. In other words, it isn't resolving the other domain accounts, only mine.

 

Attempting to repair now results in this:

 

Test-ComputerSecureChannel : Administrator rights are required to reset the secure channel password on the local

 

computer. Access is denied.

 

At line:1 char:1

 

• Test-ComputerSecureChannel -Repair -Credential DOMAIN\Administrator ...
  
• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  
• CategoryInfo : InvalidOperation: (HOSTNAME:String) [Test-ComputerSecureChannel], InvalidOperationException
  
• FullyQualifiedErrorId : UnauthorizedAccessException,Microsoft.PowerShell.Commands.TestComputerSecureChannelCommand
  

 

SOLUTION:

 

submitted by /u/The_Great_Sephiroth

[link] [comments]

 

Continue reading...