Microsoft KB Archive/207957

= Broken Trust Between Domains Results in Unsuccessful Logon Attempt =

Article ID: 207957

Article Last Modified on 11/1/2006

-

APPLIES TO


 * Microsoft Windows NT Server 4.0, Terminal Server Edition
 * Microsoft Windows NT Workstation 3.51
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Server 3.51
 * Microsoft Windows NT Server 4.0 Standard Edition
 * Microsoft Windows NT Server 4.0 Enterprise Edition
 * Microsoft BackOffice Server 4.0
 * Microsoft BackOffice Server 4.5

-



This article was previously published under Q207957



SYMPTOMS
When you attempt to log on to a Windows NT server, workstation, or domain controller using account credentials from a trusted domain, you may receive the following error:

The system cannot log you on to this domain because the trust relationship between the primary domain and the trusted domain failed.



CAUSE
This problem will occur if the trust was broken at the accounts domain (trusted), but not the resource domain (trusting).

NOTE: You can use the Microsoft Windows NT 4.0 resource kit utility Netdom.exe file to check both the status of the trust and re-create the trust.



RESOLUTION
Break the trust in both the account and resource domains, and then re-establish it on both sides.

Break the Trust Relationship

 * 1) To break the trust on the primary domain controller (PDC) in the , click Start, point to Programs, point to Administrative Tools, and then double-click User Manager for Domains.
 * 2) On the Policies menu, click Trust Relationships.
 * 3) Select the   from the Trusted Domains list box and click Remove.
 * 4) When prompted to complete the removal, click Yes
 * 5) At the PDC in the , click Start, point to Programs, point to Administrative Tools, and then double-click User Manager for Domains.
 * 6) On the Policies menu, click Trust Relationships.
 * 7) Select the   from the Trusting Domains list box and click Remove.
 * 8) When prompted to complete the removal, click Yes

Re-establish the Trust Relationship

 * 1) On the PDC in the , click Start, point to Programs, point to Administrative Tools, and then double-click User Manager for Domains.
 * 2) On the Policies menu, click Trust Relationships, and then click Add next to the Trusting Domains list box.
 * 3) In the Add Trusting Domain dialog box, type in the   name. Enter a   that you will use for the resource domain to access the accounts domain, retype the   in the Confirmation field, and then click OK.
 * 4) On the PDC in the , click Start, point to Programs, point to Administrative Tools, and then double-click User Manager for Domains.
 * 5) On the Policies menu, click Trust Relationships, and then click Add next to the Trusted Domains list box.
 * 6) In the Add Trusted Domain dialog box, type in the   name and the   that you supplied in step 3.
 * 7) Click OK in the Trust Relationship With   Successfully Established dialog box.

Keywords: kberrmsg kbnetwork kbprb KB207957

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.