The Security database on the server does not have a computer account for this

dss ds 526 Reputation points
2022-06-17T22:50:45.167+00:00

Running server in VM (windows server 2008, (restoring a joined-domain vm from a backup), I was unable to login, presenting error :

"The security Database on the server does not have a Computer account for this workstation trust relationship"

When I restores server, there was no DNS pointer listed for troubled system, so I manually added A record in DNS manager and PTR record.. restarted DNS, and rebooted both, but same issue (hoping that would be the issue)

Seems the only thing that works ib dis-joining and re-joining domain..

Seems a bit drastic...

Why is this needed ?

Nothing has changed, no virtual hardware hardware. or this this some type of SID identifier change ? even when restoring from exact same.

May be related ? I seem to remember a similar incident where that happens. You restore from backup, then you must do the same due to some identifier machine thing.

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,378 questions
0 comments
Accepted answer
  1. Dave Patrick 426.1K Reputation points MVP
    2022-06-19T02:01:07.043+00:00

    Ok, well it was worth a shot. I'd just delete the computer account and join it back to domain.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426.1K Reputation points MVP
    2022-06-17T23:02:59.343+00:00

    You could try (PowerShell) 

    Test-ComputerSecureChannel

    and if it returns false then try 

    Test-ComputerSecureChannel -Repair

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    1 person found this answer helpful.
  2. dss ds 526 Reputation points
    2022-06-19T01:18:24.973+00:00

    Didn't have any luck:

    212680-test-computersecurechannel-false.jpg

    Looking under "Domains & Trusts" properties of <server, under "Trust" tab there is nothing listed at all.

    I'm assuming the PowerShell command looks and sees if this is listed?? There is no info at Microsoft Learn on how it actually verifies and repairs but seeing there is a GUI method as well, i can only put 2 and 2 together and assume this is the command way.

    0 comments