"No computer account for trust" error when you change domain account password in Windows

This article describes a problem that occurs when you change the domain account password in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows Server 2012, Windows 7 Service Pack 1 (SP1), Windows Server 2008 R2 SP1, Windows Vista SP2, or Windows Server 2008 SP2. Before you install this update, see the Prerequisites section.
Symptoms
This problem affects operating systems that use the "Windows Kerberos Security Feature Bypass" (related to CVE-2016-0049). After you install security update 3126041, when you try to change your password through an untrusted domain, you may receive an error message that looks something like this:

The security database on the server does not have a computer account for the workstation trust relationship

For example, this problem may occur when you try to change your "domain B" password from a computer that is joined to "domain A", and the trust from "domain A" to "domain B" isn't configured.

Note The password is successfully changed even though you receive the error message.
How to get this update
Important If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Notes
  • To fix this issue for Windows 7 or Windows Server 2008 R2, install security update 3140410.
  • To fix this issue for Windows 8.1, Windows Server 2012 R2, Windows Vista SP2, or Windows Server 2008 SP2, install the update that is described in this article.
  • To fix this issue for Windows Server 2012, install update 3125424.

Method 1: Windows Update

This update is provided as a Recommended update on Windows Update. For more information on how to run Windows Update, see How to get an update through Windows Update.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Update detail information

Prerequisites

To install this update, you should first install April 2014, update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2919355) in Windows 8.1 or Windows Server 2012 R2. Or, install Service Pack 2 for Windows Vista and for Windows Server 2008.

Registry information

To apply this update, you don't have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update doesn't replace a previously released update.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
Learn about the terminology that Microsoft uses to describe software updates.
File Information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.3.960 0.18 xxxWindows RT 8.1, Windows 8.1, and Windows Server 2012 R2RTMGDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
Windows RT 8.1
File nameFile versionFile sizeDateTimePlatform
Kerberos.dll6.3.9600.18230664,57606-Feb-201616:22Not applicable
x64 Windows 8.1 and Windows Server 2012 R2
File nameFile versionFile sizeDateTimePlatform
Kerberos.dll6.3.9600.18230987,64806-Feb-201616:58x64
Kerberos.dll6.3.9600.18230801,79206-Feb-201616:32x86
x86 Windows 8.1
File nameFile versionFile sizeDateTimePlatform
Kerberos.dll6.3.9600.18230801,79206-Feb-201616:32x86

Windows Vista and Windows Server 2008

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version Product Milestone Service branch
    6.0.600 2.19xxxWindows Vista or Windows Server 2008SP2GDR
    6.0.600 2.23xxxWindows Vista or Windows Server 2008SP2LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
x86 Windows Vista
File nameFile versionFile sizeDateTimePlatform
Kerberos.dll6.0.6002.19615501,76010-Mar-201617:07x86
Kerberos.dll6.0.6002.23929504,32010-Mar-201616:36x86
x64 Windows Vista and Windows Server 2008
File nameFile versionFile sizeDateTimePlatform
Kerberos.dll6.0.6002.19615660,48010-Mar-201616:43x64
Kerberos.dll6.0.6002.23929665,60010-Mar-201616:35x64
Kerberos.dll6.0.6002.19615501,76010-Mar-201617:07x86
Kerberos.dll6.0.6002.23929504,32010-Mar-201616:36x86
ia64 Windows Server 2008
File nameFile versionFile sizeDateTimePlatform
Kerberos.dll6.0.6002.196151,400,32010-Mar-201616:29IA-64
Kerberos.dll6.0.6002.239291,410,56010-Mar-201616:06IA-64
Kerberos.dll6.0.6002.19615501,76010-Mar-201617:07x86
Kerberos.dll6.0.6002.23929504,32010-Mar-201616:36x86

Additional file information

Windows RT 8.1
File propertyValue
File nameArm_1bcaf602f58f503e6504731e93bb88c4_31bf3856ad364e35_6.3.9600.18230_none_dcab96d676390bb0.manifest
File versionNot applicable
File size705
Date (UTC)15-Mar-2016
Time (UTC)18:16
PlatformNot applicable
File nameArm_microsoft-windows-security-kerberos_31bf3856ad364e35_6.3.9600.18230_none_7baaf308cc3f8906.manifest
File versionNot applicable
File size47,925
Date (UTC)06-Feb-2016
Time (UTC)17:46
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size1,998
Date (UTC)15-Mar-2016
Time (UTC)18:16
PlatformNot applicable
x64 Windows 8.1 and Windows Server 2012 R2
File propertyValue
File nameAmd64_a85a10c736ac3fabbf6a18bf49fda882_31bf3856ad364e35_6.3.9600.18230_none_fde550c58080cbd2.manifest
File versionNot applicable
File size709
Date (UTC)15-Mar-2016
Time (UTC)18:16
PlatformNot applicable
File nameAmd64_ab6c3baf2f161fe62e4f62fac858c051_31bf3856ad364e35_6.3.9600.18230_none_cdbeb87d5d48681f.manifest
File versionNot applicable
File size709
Date (UTC)15-Mar-2016
Time (UTC)18:16
PlatformNot applicable
File nameAmd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.3.9600.18230_none_d7c71c34849fdb76.manifest
File versionNot applicable
File size47,929
Date (UTC)06-Feb-2016
Time (UTC)19:30
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size2,898
Date (UTC)15-Mar-2016
Time (UTC)18:16
PlatformNot applicable
File nameWow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.3.9600.18230_none_e21bc686b9009d71.manifest
File versionNot applicable
File size37,746
Date (UTC)06-Feb-2016
Time (UTC)18:37
PlatformNot applicable
x86 Windows Vista
File propertyValue
File nameUpdate.mum
File versionNot applicable
File size3,078
Date (UTC)11-Mar-2016
Time (UTC)19:33
PlatformNot applicable
File nameX86_7cc06129dd42a90f117e9a314d945330_31bf3856ad364e35_6.0.6002.19615_none_74be9ee517217664.manifest
File versionNot applicable
File size705
Date (UTC)11-Mar-2016
Time (UTC)19:33
PlatformNot applicable
File nameX86_be67f93bd3ec900a6f9ce1c758caa251_31bf3856ad364e35_6.0.6002.23929_none_3ffb11c7b1910793.manifest
File versionNot applicable
File size705
Date (UTC)11-Mar-2016
Time (UTC)19:33
PlatformNot applicable
File nameX86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_e8b77ae7adf77fc0.manifest
File versionNot applicable
File size38,326
Date (UTC)10-Mar-2016
Time (UTC)17:54
PlatformNot applicable
File nameX86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_e93a4cbac7199b25.manifest
File versionNot applicable
File size38,326
Date (UTC)10-Mar-2016
Time (UTC)16:53
PlatformNot applicable
x86 Windows 8.1
File propertyValue
File nameUpdate.mum
File versionNot applicable
File size1,998
Date (UTC)15-Mar-2016
Time (UTC)18:16
PlatformNot applicable
File nameX86_bc068e6458872418e8d16da87d8adecf_31bf3856ad364e35_6.3.9600.18230_none_80b2ddad8de6a1a1.manifest
File versionNot applicable
File size705
Date (UTC)15-Mar-2016
Time (UTC)18:16
PlatformNot applicable
File nameX86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.3.9600.18230_none_7ba880b0cc426a40.manifest
File versionNot applicable
File size47,925
Date (UTC)06-Feb-2016
Time (UTC)18:38
PlatformNot applicable
x64 Windows Vista and Windows Server 2008
File propertyValue
File nameAmd64_6a942950e717883311970309aadc546f_31bf3856ad364e35_6.0.6002.19615_none_f8d778728fbcaef3.manifest
File versionNot applicable
File size1,060
Date (UTC)11-Mar-2016
Time (UTC)19:33
PlatformNot applicable
File nameAmd64_9df43765e557655b545489e5510e7e02_31bf3856ad364e35_6.0.6002.23929_none_8e407db28ed66ad4.manifest
File versionNot applicable
File size1,060
Date (UTC)11-Mar-2016
Time (UTC)19:33
PlatformNot applicable
File nameAmd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_44d6166b6654f0f6.manifest
File versionNot applicable
File size38,362
Date (UTC)10-Mar-2016
Time (UTC)16:58
PlatformNot applicable
File nameAmd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_4558e83e7f770c5b.manifest
File versionNot applicable
File size38,362
Date (UTC)10-Mar-2016
Time (UTC)16:49
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size3,102
Date (UTC)11-Mar-2016
Time (UTC)19:33
PlatformNot applicable
File nameWow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_4f2ac0bd9ab5b2f1.manifest
File versionNot applicable
File size38,939
Date (UTC)10-Mar-2016
Time (UTC)17:18
PlatformNot applicable
File nameWow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_4fad9290b3d7ce56.manifest
File versionNot applicable
File size38,939
Date (UTC)10-Mar-2016
Time (UTC)16:49
PlatformNot applicable
ia64 Windows Server 2008
File propertyValue
File nameIa64_3b7a3438b55f58f00e6e53ab027851f6_31bf3856ad364e35_6.0.6002.19615_none_b96e3141c180d309.manifest
File versionNot applicable
File size1,058
Date (UTC)11-Mar-2016
Time (UTC)19:33
PlatformNot applicable
File nameIa64_7b34955135263072475ef11a509ca362_31bf3856ad364e35_6.0.6002.23929_none_a7b8a78f776798e3.manifest
File versionNot applicable
File size1,058
Date (UTC)11-Mar-2016
Time (UTC)19:33
PlatformNot applicable
File nameIa64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_e8b91eddadf588bc.manifest
File versionNot applicable
File size38,344
Date (UTC)10-Mar-2016
Time (UTC)16:44
PlatformNot applicable
File nameIa64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_e93bf0b0c717a421.manifest
File versionNot applicable
File size38,344
Date (UTC)10-Mar-2016
Time (UTC)16:22
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size2,256
Date (UTC)11-Mar-2016
Time (UTC)19:33
PlatformNot applicable
File nameWow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_4f2ac0bd9ab5b2f1.manifest
File versionNot applicable
File size38,939
Date (UTC)10-Mar-2016
Time (UTC)17:18
PlatformNot applicable
File nameWow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_4fad9290b3d7ce56.manifest
File versionNot applicable
File size38,939
Date (UTC)10-Mar-2016
Time (UTC)16:49
PlatformNot applicable
Properties

Article ID: 3139921 - Last Review: 05/10/2016 17:27:00 - Revision: 5.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation, Windows 8.1 Enterprise, Windows 8.1 Pro, Windows 8.1, Windows RT 8.1, Windows Server 2008 R2 Service Pack 1, Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows Vista Service Pack 2

  • atdownload kbexpertiseadvanced kbfix KB3139921
Feedback