How to Fix the “Trust Relationship Between This Workstation and the Primary Domain Failed” Error in Windows 11

The “Trust Relationship Between This Workstation and the Primary Domain Failed” error is a common issue in Windows 11 when your computer cannot properly communicate with the domain controller. This error usually happens when the secure channel between the workstation and the domain is broken.

It often prevents users from logging into their domain accounts and can disrupt access to network resources. Thankfully, there are straightforward methods to resolve this problem without requiring advanced technical skills.

In this guide, we will walk you through simple and detailed steps to fix this error and restore your computer’s connection to the domain.

Follow each step carefully to avoid further issues and ensure your workstation can trust the domain again.

Quick Note Before You Begin

Make sure you have administrative access on the local workstation or the domain.
Verify that your computer is physically connected to the network and can reach the domain controller.
Confirm your domain account credentials are correct and have not expired.
Ensure that the date and time settings on your computer are accurate, as mismatched time can cause trust errors.

Step 1: Restart Your Computer

Sometimes, the trust relationship error may be temporary due to network glitches or changes in the domain controller. A simple restart can refresh network connections and resolve minor issues.

Click the Start button.
Select Power and then Restart.
After the computer restarts, try logging in with your domain account again.

If the problem persists, proceed to the next step.

Step 2: Reconnect the Computer to the Domain

This method involves removing the computer from the domain and then rejoining it. Doing so resets the trust relationship between your workstation and the domain controller.

How to Remove and Rejoin the Domain

Log in to the computer using a local administrator account (not a domain account). If you do not have one, you may need help from your IT administrator.
Open Settings by pressing Windows + I.
Go to Accounts > Access work or school.
Click on your domain name, then select Disconnect.
Confirm the action and restart your computer when prompted.
After restart, open Settings > Accounts > Access work or school again.
Select Connect, then choose Join this device to a local Active Directory domain.
Enter your domain name and provide the domain administrator credentials when prompted.
Restart the computer once more after successfully joining the domain.

Try logging in with your domain account to check if the trust relationship is restored.

Step 3: Reset the Computer Account Using PowerShell

If you prefer using command-line tools or cannot easily disconnect and reconnect the domain, resetting the computer account in Active Directory can help. This step requires domain administrator privileges.

Instructions to Reset the Computer Account

Log in to a domain controller or a machine with Active Directory management tools installed.
Open PowerShell as an administrator.
Run the following command to reset the computer account, replacing COMPUTERNAME with your actual computer name:

Reset-ComputerMachinePassword -Server <DomainControllerName> -Credential (Get-Credential)

This command will prompt you to enter domain admin credentials. After successful execution, reboot the workstation and try logging in again.

Step 4: Use the Netdom Command to Reset the Trust

If PowerShell is not available or you prefer another method, the netdom tool can be used to reset the secure channel between the workstation and the domain.

Steps to Use Netdom

Log in to the local machine with an administrator account.
Open Command Prompt as administrator (search for “cmd,” right-click, and select “Run as administrator”).
Type the following command, replacing COMPUTERNAME and DOMAIN with your computer and domain names:

netdom resetpwd /s:<DomainControllerName> /ud:<DOMAINAdministrator> /pd:*

This command resets the password for the computer account on the domain controller. You will be prompted to enter the password for the domain administrator account.

Restart your computer after running this command and attempt to log in again.

Alternative Method: Use Local Security Policy

In some cases, adjusting local security policies can help with domain trust issues, especially when network policies are strict.

Steps to Modify Local Security Policy

Press Windows + R, type secpol.msc, and press Enter to open Local Security Policy.
Navigate to Local Policies > Security Options.
Find the policy named Network security: LAN Manager authentication level.
Set it to Send LM & NTLM – use NTLMv2 session security if negotiated.
Click Apply and OK.
Restart your computer and try logging in again.

This ensures your machine uses compatible authentication methods with the domain controller.

Frequently Asked Questions (FAQs)

Why does the trust relationship error happen?

This error occurs when the secure communication channel between your workstation and the domain controller breaks, often due to password mismatches, computer account resets, or network changes.

Can I fix this without removing and rejoining the domain?

Yes. You can reset the computer account password using PowerShell or netdom commands without removing the computer from the domain.

Do I need administrator rights to fix this error?

Yes. You must have local administrator rights on the workstation and domain administrator rights to reset computer accounts or rejoin the domain.

Will fixing this error affect my files and settings?

No. Rejoining or resetting trust relationships does not delete your files or personal settings.

What if I cannot log in with any account?

Try logging in with a local administrator account or use Safe Mode to perform troubleshooting steps.

When Nothing Works

If all the above methods fail, consider these final options:

Contact your network or domain administrator for assistance.
Use Windows Recovery Environment to restore the system to an earlier point.
Refer to the official Microsoft troubleshooting guide for domain trust issues: Microsoft Support: Trust Relationship Failed.
As a last resort, you may need to reset your PC or reinstall Windows, but this should only be done after backing up important data.

Conclusion

The “Trust Relationship Between This Workstation and the Primary Domain Failed” error can disrupt your ability to access domain resources, but it is usually straightforward to fix. Starting from a simple restart, moving to reconnecting the computer to the domain, or resetting the computer account password are effective solutions.

Always ensure you have the right permissions and carefully follow each step to restore trust. If you encounter difficulties, leveraging command-line tools like PowerShell or netdom can save time.

By understanding why this error happens and how to address it, you can keep your Windows 11 workstation securely connected to your domain with minimal downtime.