-
Title
When logging into domain virtual desktops display error stating there is no trust relationship to domain -
Description
VDI's that were created by Instant Provisioning process may lose trust relationship with domain -
Resolution
The issue can be caused by a compter account password change . To prevent this, please modify the registry on VDI template or create a Group Policy object to disable the setting for machines in the OU, where the VDIs are deployed.
Registry Method:
Set DisablePasswordChange to 1 to prevent the client computer from changing its computer account password.- Start Registry Editor. To do so, click Start, click Run, type regedit in the Open box, and then click OK.
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
- In the right pane, click the "DisablePasswordChange" entry.
- On the Edit menu, click Modify.
- In the Value data box, type a value of 1, and then click OK.
- Quit Registry Editor.
Related info: How to disable automatic machine account password changes
OR:
Group Policy Setting:
Computer Configuration\windows Settings\Security settings\Local Policies\Security Options
Domain member: Disable machine account Password changesWarning: If you disable machine account password changes, there are security risks because the security channel is used for pass-through authentication. If someone discovers a password, he or she can potentially perform pass-through authentication to the domain controller.