Users unable to login to MCS machines using domain account, getting error after machine account password was changed.

"The trust relationship between this workstation and the primary domain failed."

Restarting the VDA does not resolve the issue, un-joining and rejoining the machine to domain fix the problem.

Forcefully triggering password change does not show this problem.

Add the dependency for Workstation service to depend on pvsvmagent



Edit below registry on VDA.

Registry Path : HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation
Name : DependOnService
Type: REG_MULTI_SZ 
Data : PvsVmAgent

Add "PvsVmAgent" in the list.

---

Problem Cause

PVSVMAgent was removed from the dependency of workstation service. Workstation and netlogon services were started before PVSVMAgent service was initialized.

Since PvsVmAgent wasn’t yet done initializing (which includes writing the data it has in the ini file to the registry) followed by registering for registry change notificatons, when NetLogon changed the password, PvsVmAgent didn’t have idea that the password got reset behind its back.