Trust Relationship Between Workstation and Domain Fails after you restore to a previous snapshot for either VMware or Hyper. This is because by default every 30 days the Active Directory(AD) server will change the machine key for each of its members. In a development environment where security is not important. This can cause a headache, causing you to unjoin then rejoin servers back to the domain. The other option is to disable this function.
- On the Domain Controller : Launch Group Policy Management -> Control PanelSystem and SecurityAdministrative ToolsGroup Policy Management
- Edit the default group policy or edit the GPO of your choice.
- Edit “Domain member: Maximum machine account password age” = 999 Located -> Computer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesSecurity Options
- Edit “Domain member: Disable machine account password changes” = Enabled Located -> Computer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesSecurity Options
- Edit “Domain controller: Refuse machine account password changes” = Enabled Located -> Computer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesSecurity Options
- Lastly run “gpupdate /force” on all servers that need this change.
Resource links:
http://technet.microsoft.com/en-us/library/cc781050(WS.10).aspx
http://technet.microsoft.com/en-us/library/cc785826(WS.10).aspx
http://technet.microsoft.com/en-us/library/cc781050(WS.10).aspx