Jamie's Blog

The server failed to retrieve the security identifier (SID) of the TS Session Broker server.

Problem:

After someone made a VMware clone of a 2008 Terminal server I was asked to create a TS farm. After creating the farm one of the secondary servers would not join it. After looking in the System Log I found the following:

The server failed to retrieve the security identifier (SID) of the TS Session Broker server. 
Win32 error code: 0x534.

After thinking it was an error due to not running sysprep, that was not the case.

Resolution:

I was using the FQDN for the TS Session Broker server name which for whatever reason was causing this error. After removing the FQDN and only using the hostname on both the TS Session Broker and the additional server, I rebooted and the server joined the farm without any problems.

The security database on the server does not have a computer account for this workstation trust

Problem:

After joining a windows 2008 server to the domain you can not log in and it gives you the error:
The security database on the server does not have a computer account for this workstation trust

I’ve seen this on mostly 2008 Servers in my environment.

 

Resolution
  Open ADSI Edit
2.  Expand your domain
3.  Expand the DC=<yourdomain>,DC=com
4.  Expand CN=Computers
5.  Find the computer name in question and right click and select Properties
6.  Under the Attribute Editor find SERVICEPRINCIOLENAME
7.  Click Edit
8.  You should at a MINIMUM the following (you might have many others as well, but these
     two entries HAVE to be present to log into the domain)
               a.  HOST/<servername>
               b.  HOST/<servername.domainmame.com> 
9.  Click OK and then OK again
10.  Close ADSI Edit and reboot the server having the problems logging into the domain.

Windows Server 2008 IIS Certificate Settings

Certificates are now configured and installed under the main server site as show below: