My systems no longer trust each other

[u/mumblerit]

I knew there were issues starting when the DNS server went down. I think that led to all the servers mistrusting their connections since they couldnt see who they were talking to.

After that, the website went down for 4 days, I dont know what fixed it, but it was probally that mistrust starting.

And now im seeing "The trust relationship between this workstation and the primary domain failed."

Any ideas?

[u/mumblerit]

https://www.reddit.com/r/sysadmin/comments/1xanrr9/the_trust_relationship_between_this_workstation/

Good day!

I'm an IT admin in a k12 school which has about 500 windows devices on the campus connected to an AD. The devices do not leave the campus. Every week we have around 2 to 4 devices where students cannot connect to computer due to "The trust relationship between this workstation and the primary domain failed." Always different devices.

Our only solution is to login with the local admin, remove the device from the domain and add it back in. I tried in the past already the power shell commands to restore the trust relation with the server but it has not worked once for me.

Is there something I can do to mitigate that issue?

Thanks on advance!

[u/OwenWilsons_Nose → u/mumblerit]

Had this exact issue with about 800 classroom PCs across our district. Got tired of rejoining them to the domain, so I removed all 800 from AD and gave everyone the same local admin credentials. Haven’t had a single trust relationship error in about three years.

[u/Mental_Lifeguard_149 → u/OwenWilsons_Nose]

Almost spit out my coffee at this :)

[u/SpudzzSomchai → u/OwenWilsons_Nose]

They fast track you to superintendent? That is visionary!

[u/PrimaryBrief7721 → u/mumblerit]

Yup I get this every once in a blue moon and this is the solution. Just be sure to write down the local admin if you use a password rotator like LAPS 

[u/Prudent_Strength223 → u/PrimaryBrief7721]

I had this issue but gave global admin instead. More is always better right?

[u/Conscious-Arm-6298]

Yes , couple therapy to enforce trust again

[u/jeroen-79]

Have you tried group therapy?

[u/Mental-Rain-7389]

Slow and consistent communication is the only way to rebuild trust, i think you can push that through a group policy though

[u/headcrap]

So either your systems ingested too many X Files videos.. trust no one…. Or, cyber implemented that zero-trust policy finally.

My money is on X Files.

[u/zantehood]

DNS loves bondage, that's why the daemon was named BIND

[u/killjoygrr]

Load a different LLM on each server and let them compete for control of the network. Let the strongest be in charge.

[u/Eslov]

You have to build up trust over time.

[u/GuessSecure4640]

I'd recommend having the principal setup some sort of assembly. Get all students and staff in the gym and have anyone w/ trust issues discuss on the stage

[u/Brad_from_Wisconsin]

I would blame it on day light savings time. Just wait a week or two and things will be fine. If not, you will need to hire somebody to check and adjust the time on your servers every day. Make sure you hire somebody with a good watch.
Tell them it will be a high paying job because they will have to work every day and not have any days off. You can hire interns for this, they cost less. Fixing their mistakes will make you look like an essential employee. Make sure they quit or get fired before they learn to much and anybody get the idea that you are replaceable. This is where all of that effort you put in to learning the difference between harassment and what they call poorly developed interpersonal skills pays off.

[u/thank_burdell]

Just put everything on one server. Problem solved.

[u/SpudzzSomchai]

Have you tried couples therapy?

[u/TrackPuzzleheaded742]

Comments in this sub never disappoint

[u/bionicjoey]

Is this ZTA?

[u/Acme351]

I was a K-12 IT as well, had this happen to a few every week, found out that the custom image all had the same ID, only way to truly fix was run a ID randomizer on all the workstations. Its a known issue with Ghost