How to restore trust between a PC and a domain?

Question

Active Directory

Hello. On one of the computers in the corporate network, an error occurred: "Failed to establish a trust relationship between this workstation and the main domain."

The situation is generally standard. Previously, I solved it by taking the computer out of the domain and reconnecting using the local Administrator account.

But according to the decision of our Security Department, all local accounts on the computers were blocked.

Total:
- It is impossible to restore a local record in Safe Mode - It is
also impossible through the command line in Safe Mode
- When I try to boot from a LiveCD - Windows 10 simply writes: "Oh, something went wrong." On other machines loads from it.

All?) Just reinstalling the OS?

Answer 1

Boot from MS DaRT ISO, enable local account, transfer to domain.
Then implement LAPS

Answer 2

With a liveCD, you can definitely activate an account for
Security - pind. Nefig to climb where they didn’t ask

Answer 3

The situation is generally standard. Previously, I solved it by taking the computer out of the domain and reconnecting using the local Administrator account.

An ordinary user can also do this, unless of course they themselves have disabled this feature.
Try any of the methods below:

• Reinstall the computer account -> Remove from the domain -> Enter into the domain -> Restart the computer
  
• netdom resetpwd /server:DomainController /userd:Administrator /passwordd:[email protected]$$w0rd
  
• Reset-ComputerMachinePassword -Server DomainController -Credential Domain\Admin