Comments on: Trust Relationship Has Failed

By: Mark

Mark — Thu, 15 May 2008 20:07:55 +0000

Ali,

You can take some comfort in the fact that your workplace is no worse than Microsoft’s own CorpNet.

Are you sure that the other ethernet jack was hot? It would be funny if this worked for you because switching jacks was tantamount to disconnecting from the network.

Oh, and lastly, I’m sure the off-by-default local Administrator is a security feature. Nothing more secure than a bricked laptop.

-Mark

By: Ali

Ali — Thu, 15 May 2008 18:23:30 +0000

Mark, I’m not entirely sure why it happens, but we were plagued by the same issue at the workplace here, too. I tried all the passwords and usernames I could (all legit and correct) but alas to no avail.

I ended up plugging the laptop into another ethernet jack and eureka, like an unexpected but much-welcomed ray of sun through the clouds, I was able to login with one of the aforementioned user accounts.

I took the opportunity to re-enable my Administrator account (why in the world would this be disabled by default??), unjoined the domain and rejoined it. I am now able to log in with my user accounts on the regular ethernet jack again.

I just hope the damn trust doesn’t flake out on us again. I feel like we’re handling a time-bomb; surely not the most comforting of feelings.

By: Mark

Mark — Thu, 01 May 2008 12:57:17 +0000

I don’t get it. I’m sitting right there in front of my laptop which *is* connected to CorpNet. I *do* know my current password. I *do* have rights to join machines to the domain. Why can’t the fucking thing just reestablish the trust relationship and log me in?

Am I missing something? Is that a security hole of some kind?

By: Kevin Frei

Kevin Frei — Mon, 28 Apr 2008 22:49:42 +0000

This has been the way Domain privileges work since very early (NT4 at least). And it’s not a Windows setting, it’s a Domain setting that your Domain admins configure. My domain at home never expires the workstation trust relationship (and that’s the default). It’s only for paranoid, er, uh, security concious (sp?) organizations that don’t want employees to be able to access stuff in remote locations if they’re not ever in the office, or, perhaps, after they’ve been let go :-)

If you run a server OS, this kind of crap is just the admittance fee. I guarantee that Ubuntu or any other OS that will run in an enterprise exposes the exact same kind of functionality…

BTW - If you’re going to complain about Vista, complain about real things like the fact that it makes my dual core 4G laptop feel like a single core 1G running XP :-(

By: Alkivar

Alkivar — Mon, 28 Apr 2008 21:30:45 +0000

and people wonder why businesses arent adopting vista in droves… LOL