Quick troubleshooting view
Windows indicates that the of approval relationship between this workstation and the main domain failed.
- password of the unsynchronised computer account
- Old-age rehabilitation or rehabilitation of a VM
- computer account recreated or re-activated
- Check the domain
- Test the secure channel
- Control the computer object
- repair the secure channel with authorized identifiers
- re Upload computer account properly if necessary
- exit and then join the domain only as a last resort
Contextual technician plan
Ensure that the position uses DNS AD and sees a domain controller.
Test-ComputerSecureChannel - VerboseThe command should complete without an unexpected error and return data consistent with the intended service.
If the result is normal, keep this layer lower in the hypothesis ranking and continue with the next discriminating check.
If the result is abnormal, preserve the output and investigate this layer before making broader changes.
Use Test-ComputerSecureChannel from a local admin session.
nltest /sc_verify:DOMAINE.LOCAL.The command should complete without an unexpected error and return data consistent with the intended service.
If the result is normal, keep this layer lower in the hypothesis ranking and continue with the next discriminating check.
If the result is abnormal, preserve the output and investigate this layer before making broader changes.
Check the account status, existence and l in Active Directory.
“Control the computer object” should produce an observation that clearly confirms or rules out “computer account recreated or re-activated”.
If the observation is normal, lower “computer account recreated or re-activated” in the ranking and continue with the next distinct check.
If the observation is abnormal, keep the evidence and investigate “computer account recreated or re-activated” first. Related action: exit and then join the domain only as a last resort.
If multiple positions are affected, control the replication of DCs.
“Check replication” should produce an observation that clearly confirms or rules out “replication Active Incoherent Directory”.
If the observation is normal, lower “replication Active Incoherent Directory” in the ranking and continue with the next distinct check.
If the observation is abnormal, keep the evidence and investigate “replication Active Incoherent Directory” first. Related action: correct replication problem before processing post by post.
Repeat the same validation test after the correction and confirm the original symptom is gone. Validate stability before closing the incident.
Before changing configuration, record the current value and a way back.
Crack if multiple machines lose confidence simultaneously or if AD replication has errors.
Windows indicates that the of approval relationship between this workstation and the main domain failed.
Causes probables
- password of the unsynchronised computer account
- Old-age rehabilitation or rehabilitation of a VM
- computer account recreated or re-activated
- replication Active Incoherent Directory
Diagnostic étape par étape
- 1
Check the domain
Ensure that the position uses DNS AD and sees a domain controller.
- 2
Test the secure channel
Use Test-ComputerSecureChannel from a local admin session.
- 3
Control the computer object
Check the account status, existence and l in Active Directory.
- 4
Check replication
If multiple positions are affected, control the replication of DCs.
Commands utiles
Test-ComputerSecureChannel - Verbosenltest /sc_verify:DOMAINE.LOCAL.Solutions possibles
- repair the secure channel with authorized identifiers
- re Upload computer account properly if necessary
- exit and then join the domain only as a last resort
- correct replication problem before processing post by post
Crack if multiple machines lose confidence simultaneously or if AD replication has errors.