When running "Cached Credential Utility" (CCU) and after entering the password for the target account, a pop up window may appear with the following error message "The security database on the server does not have a computer account for this workstation trust relationship. " The CCU stops running.
As mentioned this issue is related to Microsoft AD. When this error shows up follow this steps:
Open Active Directory Users and Computers.
A. Open up Active Directory Users & Computers pointed to the domain the computer account resides in.
B. From the “View” pull-down menu, make sure that “Advanced Features” is checked.
C. Navigate to the part of your organizational unit (OU) structure where the computer account for this server resides.
C. Open the Properties for the computer object.
D. Choose the “Attribute Editor” tab on the Properties dialog box.
E. Check the Attributes dNSHostName & servicePrincipalName – anywhere that a fully qualified hostname is specified (e.g. myserver.mydomainname.com), make sure that the entry matches the hostname you have configured when you go here on your server: Start -> Computer -> Right-Click, Properties -> Change Settings (under “Computer name, domain… settings”) -> Full Computer Name.
As an example, for a fictitious W2K8 R2 server whose Full Computer Name is “srv1.mydomainname.com”, these attribute/value pairs should be in Active Directory:
dNSHostName:
srv1.mydomainname.com
servicePrincipalName:
HOST/SRV1
HOST/srv1.mydomainname.com
RestrictedKrbHost/SRV1
RestrictedKrbHost/srv1.mydomainname.com
TERMSRV/SRV1
TERMSRV/srv1.mydomainname.com
If you find that any of these entries are incorrect, attempt to update them try logging in. After you make any changes, please remember that it may take several minutes for those changes to replicate between domain controllers. Adjusting these values may require a reboot.
© 2025 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center