Question : Windows Server 2008 R2 logon problem

Experts,

Today I have replaced an existing domain member file server with new hardware. Before I began I renamed the original machine and released its static IP. I then took the new hardware, joined it to the domain with another name from the box its replacing and restored the data to it from backup.

I then changed its name and IP as per the original box. Now whenever I login using the domain admin account I get the error:

"The security database on the server does not have an account for this workstation trust relationship"

Local admin account works fine. I have tried a number of fixes from the net including re-joining it to the domain to no avail. I have even reloaded the OS with the same problem occurring afterwards. If I rename the server it works fine so the issue is specifically around that name. Normally I would just accept the name change but as it’s a file server I will also have to change the profile and home drive paths for 100+ users. Other than the logon issue it seems OK, shares working fine etc.

An event is generated on failed login, shown below:

A Kerberos Error Message was received:
 on logon session
 Client Time:
 Server Time: 14:52:30.0000 7/7/2010 Z
 Error Code: 0x7  KDC_ERR_S_PRINCIPAL_UNKNOWN
 Extended Error: 0xc0000035 KLIN(0)
 Client Realm:
 Client Name:
 Server Realm: domain.local
 Server Name: host/server.domain.local
 Target Name: host/server.domain.local@domain.local
 Error Text:
 File: 9
 Line: efb
 Error Data is in record data.

Any help much appreciated!

Thanks.

Answer : Windows Server 2008 R2 logon problem

In the end we used LDIFDE to do an AD search for duplicate SPN's (Service Principal Name) as some research we did indicated this could be an issue. As it turns out the old (renamed) server object still had an SPN registered to it containing the name we wanted to use. Removing the old object resolved the issue. I would imagine that just removing the specific SPN would resolve it as well if you needed the object.