| Previous | Next |
| STATUS_TOO_LATE | STATUS_NO_TRUST_SAM_ACCOUNT |
STATUS_NO_TRUST_LSA_SECRET
The machine trust secret is missing locally
A domain-joined computer maintains a machine-account trust secret in the local LSA database. This status means that secret is missing, so the workstation cannot prove its trust relationship to the domain in the expected way.
The domain account may still exist; the local machine secret is the immediate problem. Treat it as a secure-channel/trust-state issue.
What to inspect
- Check domain join state and secure channel health for the computer account.
- Do not reset user passwords; inspect the machine account and local LSA state.
- Correlate with Netlogon events and recent restore, clone, rename, or domain rejoin operations.
References
- Microsoft: Kerberos authentication troubleshooting guidance
- Microsoft: Configure security policy settings
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.