Azure AD Domain Services Resource Forest Trust Error

Question

Im trying to establish a trust between my on-premise domain and Azure AD Domain services managed domain.

The on premise side has added forwarders for both machine IPs and added the trust to the DC.

On the AADDS side after adding the trust information I am getting the following alert:

There is a problem with the trust for domain <mydomain>. Error: The security database on the server does not have a computer account for this workstation trust relationship.

Any advice or solution?

Thank you

Answer 1

Hello @Slickrc23 ,

Thank you for posting here.

We can check prerequisites based on the information in the following link and establish trust as below:

1. Prerequisites
2. Sign in to the Azure portal
3. Configure DNS in an on-premises AD DS environment to support Azure AD DS connectivity
4. Create a one-way inbound forest trust in an on-premises AD DS environment
5. Create a one-way outbound forest trust in Azure AD DS
6. Test and validate the trust relationship for authentication and resource access

For more information, we can refer to the following link.
Tutorial: Create an outbound forest trust to an on-premises domain in Azure Active Directory Domain Services
https://learn.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-forest-trust

Other information for your reference.
Tutorial: Create and configure an Azure Active Directory Domain Services managed domain with advanced configuration options
https://learn.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance-advanced

Hope the information above is helpful.

Best Regards,
Daisy Zhou

Answer 2

Hi

For this kind of rejoin the machine to domain can fix this issue.

You can try also to reset secure channel password :
https://devblogs.microsoft.com/scripting/use-powershell-to-reset-the-secure-channel-on-a-desktop/

*Please don't forget to mark this reply as answer it it helps you to fix your issue *

Answer 3

Thank you for the response. I have followed all guidance by the documentation and get the error in Azure AD Domain Services alert/overview:

There is a problem with the trust for domain <mydomain>. Error: The security database on the server does not have a computer account for this workstation trust relationship.