Move-SPUser produces "The trust relationship between the primary and the trusted domain failed"

pacem 21 Reputation points

I have two domains and I would like to move SharePoint users to a new domain using Move-SPUser command. However I am getting error "The trust relationship between the primary and the trusted domain failed"

SharePoint Server Management
SharePoint Server Management
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Management: The act or process of organizing, handling, directing or controlling something.
2,795 questions
0 comments No comments
{count} votes

Accepted answer
  1. Elsie Lu_MSFT 9,756 Reputation points

    Hi @pacem , welcome to Q&A forum!

    What version of SharePoint are you using?

    You could first check your accounts, some users in a similar situation solved the problem with correct accounts.

    See the related two posts:
    Getting Error The trust relationship between the primary domain
    The trust relationship between the primary domain and the trusted domain failed when Publishing feature is enabled


    And as mentioned in the thread

    There are 3 possible causes for your issue in my mind:

    • The trust relationship between primary domain was broken.
    • The firewall blocked the connections used for establish trust relationship.
    • Configuration caches was corrupted.

    For number 1, please verify the trust ( and try to recreate the trust (

    For number 2, please follow the steps:

    • If possible, temporarily stop the firewall in both servers to verify whether this is the cause of the issue.
    • If this the cause of the issue, Open ports 1025 and 1026 used to RPC session for SharePoint. see KB899148 ( for more information.
    • If open ports 1025 and 1026 cannot resolve the issue, please use Network Monitor tool to do further troubleshooting.

    For number 3, please follow the steps to refresh the configuration cache.

    • Open Start > Run and type %allusersprofile% to open all users’ profile folder.
    • Navigate to Microsoft\SharePoint\Config[GUID] folder.
    • You should see a cache.ini file and lots of XML document. Delete all the XML document.
    • Edit cache.ini, change the number to Save and close it.
    • Restart Windows SharePoint Services Timer in Services

    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 additional answers

Sort by: Most helpful