Win2k Active Directory and trust relationships

[goob2k]

I just upgraded the old NT4 Servers to Win2k Active Directory. All has gone fine except for the fact that I'm getting some trust relationship errors from the workstations on the domain (there is only one domain). In order to reestablish the trust relationship, I know I can drop the workstations out of the domain and then putting them back in, but I would have to do that for 30+ computers (and I'm lazy).

Is there any way to reestablish the trust relationship without dropping the workstations from the domain and then have them rejoin the domain?

 

[LuckyTaxi]

what's the exact error message that u r getting? also, wut are your workstations running?

 

[Saltin]

If you only have one domain, then you arent getting true domain trust errors. It sounds to me like some of your clients don't have computer accounts in the domain, or the exsisting computer accounts have become corrupted somehow.
I would disjoin and then rejoin the boxes to the domain.

Trust relationships exsist between domains and/or forests, not between computers within a domain. Computers within a domain use authentication (of user and computer) to establish relationships and connections.

 

[goob2k]

The Error Message:
The computer X tried to connect to the server \\SERVER using the trust relationship established by the A domain. However the computer has lost the security identifier (SID) when the domain was reconfigured. Reestablish the trust relationship.

The workstations are running Win2k Pro.

 

[Saltin]

Dude. Are you certain you only have one domain on your network now? Has the old domain been completely removed ( i.e. the Domain controllers are de-comissioned)??

You may want to check the domain membership of your clients. It sounds like some of them think they are in the old domain still.

 

[LuckyTaxi]

Answer

I found this in a newsgroup