TRY NOW
book meeting
BACK TO KB LIST

Member servers are not able to authenticate to the Domain Controller

KB ID: 1281
Product: Veeam Backup & Replication
Veeam Agent for Microsoft Windows
Veeam Cloud Connect
Published: 2011-10-06
Last Modified: 2026-10-05
mailbox
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.

Cheers for trusting us with the spot in your mailbox!

Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest

error icon

Oops! Something went wrong.

Please, try again later.

Challenge

Either of the following errors occur: 
No authority could be contacted for authentication.
The trust relationship between this workstation and the primary domain failed.

Cause

The server has lost trust with the Active Directory domain.

Solution

Login to the machine using a local (non-domain) account and review the following:

  1. Verify the trust relationship with the domain by running the following command on the machine.
Test-ComputerSecureChannel -Verbose
Windows PowerShell window running Test-ComputerSecureChannel -Verbose. The command returns False, and the verbose output states that the secure channel between the local computer and the domain is broken.
Example of a machine with a broken relationship.    
  1. If the trust relationship is broken, use the following command to repair it.
Test-ComputerSecureChannel -Repair -Verbose
Windows PowerShell window running Test-ComputerSecureChannel -Repair -Verbose. The command returns True, and the verbose output states that the secure channel between the local computer and the domain was successfully repaired.

If the repair does not succeed because the current account does not have sufficient permissions in Active Directory, run the command again with the -Credential parameter. When prompted, enter the credentials of a domain account that has permission to reset computer account passwords.

Test-ComputerSecureChannel -Repair -Credential (Get-Credential) -Verbose
  1. Recheck the trust relationship.
Test-ComputerSecureChannel -Verbose
Windows PowerShell window running Test-ComputerSecureChannel -Verbose after the repair. The command returns True, and the verbose output states that the secure channel between the local computer and the domain is in good condition.

More Information

If domain trust relationship issues continue to occur, it is advisable to investigate the health of the Active Directory servers.

If the repair does not restore the trust relationship, rejoin the machine to the domain, or contact Microsoft Support.

If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case.

To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.

Spelling error in text

Thank you!

Thank you!

Your feedback has been received and will be reviewed.

Oops! Something went wrong.

Please, try again later.

You have selected too large block!

Please try select less.

KB Feedback/Suggestion

This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
By submitting, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
Verify your email to continue your product download
We've sent a verification code to:
  • Incorrect verification code. Please try again.
An email with a verification code was just sent to
Didn't receive the code? Click to resend in sec
Didn't receive the code? Click to resend
Start using Veeam:
Download the product
&
Activate the license key
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

error icon

Oops! Something went wrong.

Please, try again later.