The server loses trust

Question

Hello. I have some servers losing communication with the domain controller. After a reboot everything works.

Servers in the same site. dcdiag /q on the domain controller shows no errors.

Guided by the article: https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/enable-debug-logging-netlogon-service

I have enabled the logs. Can someone help to find the problem ?

https://drive.google.com/file/d/1xissx3gui2VBspkM8nwnnDH-smV91cEQ/view?usp=sharing

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having query\issues related to

You Server or computer can lose Trust between AD DC due to some reasons below.

1. Your computer account object has been removed from Active Directory
2. Someone accidentally adds a computer with the same hostname to the domain;
3. You computer local time is offset by more than 5 minutes from the authenticating domain controller;
4. Your domain controllers are having replication problems
5. Performing computer cloning or Restore from backup without running the Sysprep,
6. Some other Admin may manually reset your computer’s domain account;

----------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

Hi @Андрей Михалевский ,

If I got your point, you have servers with trust relationships.

If that is too often, I suggest you investigate either or all of the following:

• network quality to the affected servers (it may comes from specific sub network, location...)
• name services to confirm entry matches as expected
• name conflict

A ping to the affected server from the DC using both the IP address and the name for and extended period of time can be simple way of observation.

If you encounter this on many servers, you better check on you deployment process if servers are correctly generalized and renamed before being joined to domain in a way they won’t cause any conflict.

Hope this will be helpful.