Azure VMs falling off domain more frequently

Question

We have multiple Windows 10 VMs hosted on Azure and configured via Citrix for user access. Recently there has been more cases than expected of VMs falling off domain. Error message when trying to RDP "Trust Relationship between the workstation and primary domain failed".
The issue gets resolved if I log in using local cred and rejoin the VM to the domain. Also If I reset the password of VM from Azure portal it fix the issue.
I understand that the issue could be caused because the secret password isn't set to the same value in the domain controller.
Question : What can be done to proactively fix the issue from root so that we can eliminate it's re-occurance ?

Answer 1

Hi,

Thank you for posting the query on Microsoft Community.

The issue you might be running into is that if the system date is before the current date, the system might think the that Secure Channel Password needs to be changed since the Domain Controller may think the currrent password has expired.
The Domain Controller will automatically issue a new Secure Channel Password but because the systems are frozen, the workstation will revert to the old Secure Channel Password and the trust relationship will be broken and the system removed from the domain.

Also you should verify that you have a Group Policy Object set to insure that MachineMaximumPasswordAge is set to 99999 days.

You can get further information about disabling the Secure Channel Password by referring to the article "Disable Secure Channel Password and Trust Password Changes" which can be found at Disable Disable Secure Channel Password and Trust Password Changes.

You can refer below articles which might help you to resolve it.

https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/troubleshoot-broken-secure-channel

https://social.technet.microsoft.com/Forums/en-US/aea7b73a-11e0-4021-8e8d-d08541fd2280/computers-falling-off-the-domain?forum=itproxpsp

-----------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--

Answer 2

@Rajesh kumar Mishra Where the steps provided by @Limitless Technology resolve this issue