Hybrid AVD machines Intune Enrolled, Using Entra Kerberos Storage account : Issue with issuing kerberos ticket

Hi Md Saqlin Mushtaq,

Thanks for posting question in Microsoft Q&A forum,

“The SAM database on the Windows Server does not have a computer account for this workstation trust relationship”

The above error with status 0xc000018b means the machine you are logging on to does not have a valid computer account in the domain / security database, or the secure channel is broken,

The issue occurs because the Azure Virtual Desktop session hosts intermittently fail to obtain a Kerberos ticket for the FSLogix profile share, so FSLogix falls back to a local or temporary profile. This matches the error “The security database on the server does not have a computer account for this workstation trust relationship,” which indicates an unstable secure channel between the VM and the domain.​

In this environment, FSLogix profiles are stored on an Azure Files share using Microsoft Entra Kerberos, so a valid Kerberos ticket is required at each logon for the profile container to attach successfully. When the VM cannot establish a proper trust relationship and obtain that ticket, access to the UNC path fails and FSLogix cannot mount the profile VHD(X), resulting in intermittent “profile not loading” behavior.​

To remediate, follow these steps:

• Verify and repair the domain secure channel on the affected VMs (for example with Test-ComputerSecureChannel or by rejoining the VM to the domain) so the “security database / trust relationship” error no longer occurs.​
• Confirm that Microsoft Entra Kerberos for Azure Files is fully configured and that users have the required Azure RBAC role (such as Storage File Data SMB Share Contributor) on the file share used by FSLogix.​
• Review FSLogix logs and configuration by using the official troubleshooting guidance for container attach/detach issues and intermittent or temporary profiles.

Reference:

• Troubleshoot connections to Microsoft Entra joined VMs - Azure Virtual Desktop | Microsoft Learn
• Microsoft Entra Kerberos Authentication for Azure Files | Microsoft Learn
• Troubleshoot connections to Microsoft Entra joined VMs - Azure Virtual Desktop | Microsoft Learn
• Error: The security database on the server does not have a computer account for this workstation trust relationship - Microsoft Q&A

Kindly let us know if the above helps or you need further assistance on this issue.

Please "up vote" if the information helped you. This will help us and others in the community as well.