Windows clients lost trust relationship with domain

Question

We recently use the Offline Domain Join ODJ.exe utility to remotely re-deploy a DirectAccess Client GPO settings to a fleet of Windows users that lost the DirectAccess client due to a DA server rebuild. The majority seem to be fine, but we recently noticed on 5-7 clients that the domain trust relationship is broken for some reason and we manually need to re-add the PC to the domain. This is a pain since most of those users are working from home due to the pandemic. I spent countless hours trying to figure out what may be run, or if there any experts ton DirectAccess technologies that can assist. I am not 100% convinced is a DA issue and it may be coincidental at this point. As for the device losing the trust, I am trying also to figure out why is happening. We are at a lost stage :-( Reference: https://learn.microsoft.com/en-us/windows-server/remote/remote-access/directaccess/directaccess-offline-domain-join

Answer 1

I'd check the clocks are in sync, replication is good. This one may also help.
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/reset-computermachinepassword?view=powershell-5.1&viewFallbackFrom=powershell-3.0

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Hi,

Thanks for posting in Q&A platform.

Regarding of your issue lost trust relationship with domain, please try if the following method is helpful.

Reset the specific account in ADUC

Best Regards,
Sunny

----------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

none of these work.. we got the same problem.