[Samba] Delete machine account from AD to fix The trust relationship

[L.P.H. van Belle]

Follow these steps. 

First try this, 
Goto computer properties, Goto Change the computer/domainname. 
Klik more options. Check if the primary dns is set. 
Normaly its not needed to change things here. 
Remove the computer from the domain.


With RSAT tools, check if everything is removed of the PC from the domain. 
Cleanup the DNS before you re-join the pc.  (remove the A and PTR) 
Cleanup the AD, ( OU=Computers ) 
Wait 1-2 minutes
Try Rejoin. 

This, normaly works for me. 

If that didnt work. Read , and yes it hints to RDP, im affected here on a few computers with this. 
https://blogs.technet.microsoft.com/mckittrick/unable-to-rdp-to-virtual-machine-credssp-encryption-oracle-remediation/ 

(* the direct link : https://support.microsoft.com/nl-nl/help/4103727/windows-10-update-kb4103727 ) 
Security updates to Microsoft Edge, Internet Explorer, Microsoft scripting engine, Windows app platform and frameworks, Device Guard, Windows kernel, Microsoft Graphics Component, Windows storage and filesystems, Windows Hyper-V, Windows virtualization and kernel, HTML help, and Windows Server.
Im investigating this atm. 


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Paul 
> Littlefield via samba
> Verzonden: maandag 14 mei 2018 13:14
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Delete machine account from AD to fix The 
> trust relationship
> 
> Hello Samba List,
> 
> I have a desktop with a clean full install of Windows 10 Pro 1709.
> 
> I have an entry in the Samba 4.7 AD for the machine account 
> (from when it was Windows 7 Pro).
> 
> Windows 10 appears to join the Domain successfully.
> 
> When I try to log in with the DOMAIN\Administrator account I 
> get the Windows error:-
> 
> "The security database on the server does not have a computer 
> account for this workstation trust relationship."
> 
> Do I try the Windows 10 PowerShell 
> Reset-ComputerMachinePassword fix or delete the Machine 
> account from the Samba 4.7 AD?
> 
> If it's the latter, how do I do that?
> 
>     $ samba-tool user delete XXXXX
> 
> Thanks in advance.
> 
> Paul
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>