'Trust relationship has been lost with domain controller'

How to quickly resolve Windows 2008 error: 'Trust relationship has been lost with domain controller'

This is caused when a machine has lost its password sync with Active Directory.

An easier way to fix this issue than disjoining and rejoining the domain is to use the NETDOM tool.

• 1. At a command prompt, type the following command:
  2. netdom resetpwd /s:server /ud:domain\User /pd:*
  3. A description of this command is:
  4. /Server:DomainController is the name of the domain controller to use for setting the machine account password. This is the server where the KDC is running.
• /ud:domain\User is the user account that makes the connection with the domain you specified in the /s parameter. This must be in domain\User format. If this parameter is omitted, the current user account is used.
• /pd:* specifies the password of the user account that is specified in the /ud parameter. Use an asterisk (*) to be prompted for the password.

1. For example, the local domain controller computer is Server1 and the peer Windows domain controller is Server2. If you run Netdom.exe on Server1 with the following parameters, the password is changed locally and is simultaneously written on Server2, and replication propagates the change to other domain controllers:
2. netdom resetpwd /s:server2 /ud:mydomain\administrator /pd:*
3. Restart the server whose password was changed. In this example, this is Server1.