How to fix error error-nologon-interdomain-trust-account in Windows 11

Solution Steps

1. 1 Press Windows key + R, type 'dsa.msc' and press Enter to open Active Directory Users and Computers. This is the tool where you can manage user accounts in a domain. If you're not on a domain controller, you may need to install RSAT tools.
2. 2 Navigate to the domain and find the affected user account. Right-click it and select 'Properties'. Go to the 'Account' tab. Look at the 'Account options' list. Find the option 'Account is sensitive and cannot be delegated' and ensure it's unchecked. Also check that 'This account supports Kerberos AES 128/256 bit encryption' is set appropriately.
3. 3 Check the 'Account' tab for the 'Logon Hours' and 'Log On To' settings. Make sure the account is allowed to log on to the specific workstation. If 'Log On To' is restricted, add the computer name.
4. 4 If the account is indeed a trust account, you should not use it for interactive logon. Instead, create a new user account with appropriate permissions. In ADUC, right-click the 'Users' container, select 'New', then 'User'. Fill in the details and set a password. Then add this new user to the appropriate groups.
5. 5 After creating the new account, test logging in with it. If you need to keep the old account for service purposes, ensure it's not used for interactive logon. You can also use PowerShell to check the account's userAccountControl attribute: run 'Get-ADUser -Identity username -Properties userAccountControl' and look for the value 0x200 (INTERDOMAIN_TRUST_ACCOUNT).