Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I encounted a unique situation on a network I recently took over. A windows Vista SP1 workstation lost its connection to the domain, displaying the error message "The trust relationship between this workstation and the primary domain failed".

Normally, in the rare instances when I've seen that occur, I simply logged in as the local administrator, disconnected the computer from the domain, and re-connected it to the domain.

However, the local administrator account is disabled and was likely never enabled.

The local user that was used to initially configure the workstation is either disabled, or uses a password I don't have a record for.

The domain user who normally logs into the workstation cannot log in (the cached credencials have likely expired).

Is there anything I can do?

share|improve this question

There is a tool out there called the "offline NT password and registry editor" which can unlock user accounts and reset their passwords.

share|improve this answer
up vote 0 down vote accepted

I found a loophole. I unplugged the network cable, rebooted, then logged in as the domain administrator. Then, enabled the local administrator account and disconnected/re-connected to the domain.

share|improve this answer

First this will only work, if the Domain Administer had logged into the computer and his/her account was cached on the local computer.

By definition, if you "unplugged the network cable." then you are not able to authenticate to the domain.

There are ways to hack the local admin account, but you will need a dos boot disk/USB, and a file from the windows ISO.

share|improve this answer
Welcome to Super User! This is really a comment and not an answer to the original question. To critique or request clarification from an author, leave a comment below their post - you can always comment on your own posts, and once you have sufficient reputation you will be able to comment on any post. – DavidPostill Nov 10 '15 at 12:02

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .