Server 2025 Domain Controllers - Trust relationship issues on workstations after 30 days as "pwdLastSet" value unable to be updated

Anonymous
2025-01-03T12:18:07+00:00

Hi

We have 4 Domain controllers upgraded to server 2025 and about 30+ still on 2022. The newly upgraded servers appear to have a bug where by any workstations going through them are unable to update their "pwdLastSet" value and so after the 30 day limit on that field is hit they then fall into a trust relationship issue with the domain. Is this a known bug of server 2025? Are there any known fixes for this issue?

Windows for business | Windows Server | Directory services | Active Directory

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

54 answers

Sort by: Most helpful
  1. Anonymous
    2025-01-16T08:03:15+00:00

    Our affected systems so far are:

    • Member Server: Windows Server 2022 LTSC (Version 21H2)
    • Client Systems: Windows 10 LTSC (Version 21H2)
    • Member Server: Ubuntu Server 22.04

    Our domain level is 2016.

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2025-01-15T14:00:10+00:00

    We are experiencing exactly the same issue. Currently, we are managing by manually resetting the machine passwords. In parallel, we have removed the 2025 domain controllers from the domain. We cannot yet confirm whether this has resolved the problem.

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2025-01-15T13:01:16+00:00

    I had it. Time was not sync in the domain

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2025-01-15T12:01:23+00:00

    Hello,

    I am having the same issue with a newly installed 2025 Server.

    Additionally, I'm now having an issue when a new user account is created with the option "User must change password at next login" selected it just endlessly loops asking for a new password to be entered when the user attempts to log in for the first time.

    Has anyone else come across this with Server 2025?

    Thanks,

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2025-01-14T09:50:15+00:00

    Thanks good that a microsoft employees can confirm the issue. I pray for a fix^^

    Maybe the clients are finding domain to late at start up? And cant send the password change to server?

    Was this answer helpful?

    0 comments No comments