The trust relationship between this workstation and the primary domain failed
Most likely cause: The computer's secure password with the domain controller has expired or become out of sync
Try first: Check current time and time zone (w32tm /query /status)
Likely causes
- The computer's secure password with the domain controller has expired or become out of syncmost likely
- Time or date on the computer is too far off from the domain controllerpossible
- Network problems or the domain controller itself is having issuesless likely
How to fix it
Check current time and time zoneSafe
Open Command Prompt as administrator and run the command below to see if the clock is wrong. Domain trust fails if the time difference is more than a few minutes.
w32tm /query /statusTest the secure channelSafe
Run this PowerShell command as administrator to check the trust without changing anything.
Test-ComputerSecureChannelRepair the secure channelChanges settings
If the test above returns False, run the repair command below as administrator. This resets the computer's secret password with the domain.
Test-ComputerSecureChannel -Repair⚠ You must be logged in with a local administrator account, not a domain account.
Rejoin the domainDangerous
If repair fails, remove the computer from the domain then add it back. First back up any important files.
sysdm.cpl (then use the Computer Name tab)⚠ Back up all data first. This requires domain administrator credentials and will require a restart.
If that didn't fix it
Ask a domain administrator to reset the computer account in Active Directory Users and Computers, then try the repair command again.
When to see a technician
Contact your IT support or domain administrator if you lack local admin rights or the domain controller appears unreachable.
Quick answers
- What does The trust relationship between this workstation and the primary domain failed mean?
- This Windows error means the computer (workstation) can no longer securely talk to the domain controller that manages logins and permissions. The 'trust' is a secret password the computer shares with the domain; when it breaks, domain users cannot log in.
- What causes The trust relationship between this workstation and the primary domain failed?
- The computer's secure password with the domain controller has expired or become out of sync. (most likely) Time or date on the computer is too far off from the domain controller. (possible) Network problems or the domain controller itself is having issues. (less likely)
- How do I fix The trust relationship between this workstation and the primary domain failed?
- Try these in order, safest first: 1. Check current time and time zone. 2. Test the secure channel. 3. Repair the secure channel. 4. Rejoin the domain.
- What if that didn't fix it?
- Ask a domain administrator to reset the computer account in Active Directory Users and Computers, then try the repair command again.
- When should I see a technician?
- Contact your IT support or domain administrator if you lack local admin rights or the domain controller appears unreachable.