Thursday, June 2, 2011

The security database on the server does not have a computer account for this workstation trust relationship

After joining a new Windows Server 2008 R2 member server to the domain I was not able to log in, even with a Domain Admin account. The following error was experianced:

The security database on the server does not have a computer account for this workstation trust relationship



After some investigation it turns out the computer new computer account did not have a SPN (Service Principal Name). This is stored in the servicePrincipalName attribute in Active Directory. Below is a screenshot from ADSIEdit:



I added two SPN's to the computer account object in Active Directory in the format of:

HOST/COMPUTERNAME
HOST/COMPUTERNAME.domain.local




I was then able to log in to the new workstation.
Posted by at
Labels: ,

9 comments:

  1. AnonymousJanuary 29, 2012 at 7:57 AM

    Nice post. Here’s a tutorial that shows how you can easily build an online database-driven web application with a parent-child table relationship, without codinghttp://blog.caspio.com/web-database/creating-one-to-many-relational-datapages/

    ReplyDelete
  2. derekgeMay 4, 2012 at 2:19 PM

    Thanks for this tip.

    ReplyDelete
  3. UnknownJuly 5, 2012 at 11:20 PM

    I wanted to thank you for this excellent read!! I definitely enjoyed every little bit of it. I have you bookmarked your site to check out the new stuff you post.
    data recovery irvine ca

    ReplyDelete
  4. AnonymousOctober 8, 2012 at 12:50 AM

    Can you suggest what can be done if get this error on AD, and i am not able to login to AD with the local account as well....

    ReplyDelete
  5. Clint BoessenOctober 8, 2012 at 12:52 AM

    Add the SPN entries using ADSIEdit as per my instructions above.

    ReplyDelete
  6. UnknownNovember 10, 2014 at 1:07 PM

    Why is this happening though any ideas?

    ReplyDelete
  7. Greg'sDecember 20, 2015 at 10:40 PM

    Thanks, made quick work of my issue

    ReplyDelete
  8. Shannon SmithSeptember 26, 2016 at 4:29 AM

    After being in relationship with George for five years,he broke up with me, I did everything possible to bring him back but all was in vain, I wanted him back so much because of the love I have for him, I begged him with everything, I made promises but he refused. I explained my problem to someone online and she suggested that I should contact a spell caster that could help me cast a spell to bring him back but I am the type that don't believed in spell, I had no choice than to try it, I meant a spell caster called DR Mako and I email him, and he told me there was no problem that everything will be okay before three days, that my ex will return to me before three days, he cast the spell and surprisingly in the second day, it was around 6pm. My ex called me, I was so surprised, I answered the call and all he said was that he was so sorry for everything that happened, that he wanted me to return to him, that he loves me so much. I was so happy and went to him, that was how we started living together happily again. Since then, I have made promise that anybody I know that have a relationship problem, I would be of help to such person by referring him or her to the only real and powerful spell caster who helped me with my own problem and who is different from all the fake ones out there. Anybody could need the help of the spell caster, his email: Makospelltemple@yahoo.com or call him :+2348108737816

    ReplyDelete

Subscribe to: Post Comments (Atom)