Repair Trust Relationship Between Workstation and Domain Controller –

How to Fix the Trust Relationship

Method 1: Repair via PowerShell (No Reboot or Rejoin Required)

You can fix this live without removing the computer from the domain:

1. Log in locally: At the Windows 11 login screen, sign in using a local administrator account (type .\administrator or your local admin username and password).
2. Open PowerShell: Right-click the Start button and select Terminal (Admin) or Windows PowerShell (Admin).
3. Test the secure channel: Type the following command to verify the broken trust: PowerShell Test-ComputerSecureChannel Use code with caution. (If it returns False, the secure channel is broken).
4. Repair the secure channel: Run the repair command and supply domain administrator credentials when prompted: PowerShell Test-ComputerSecureChannel -Repair -Credential (Get-Credential) Use code with caution.Alternative single command option: powershellTest-ComputerSecureChannel -Credential domainname\administrator -Repair Use code with caution.
5. Verify and log off: Once the command returns True, type logoff or restart the computer, then log in normally with your Active Directory credentials.

Method 2: Temporarily Switch to a Workgroup and Rejoin

If the PowerShell repair method fails, you can disjoin and rejoin the domain:

1. Log in to the Windows 11 machine using a local administrator account.
2. Open Settings or search for View advanced system settings (System Properties).
3. Go to the Computer Name tab and click Change…
4. Change the member from Domain to Workgroup, type a temporary name (e.g., WORKGROUP), click OK, and restart the PC.
5. After restarting, log back into the local admin account, go back to System Properties > Computer Name > Change…, and switch it back to Domain, entering your AD domain name.
6. Provide domain administrator credentials when prompted and restart the computer.