The login is from an untrusted domain and cannot be used with integrated authentication

Inga Minciuna 0 Reputation points
2025-12-18T13:43:13.5833333+00:00

Hi,

After Windows patches on Dec 10th, all my SQL and Report servers login is failing with the error:

"The login is from an untrusted domain and cannot be used with Integrated Authentication". The report server would be able to comunicate with sql database if is to use SA account, but domain trusted connection.

Thansk,

SQL Server Reporting Services
SQL Server Reporting Services
A SQL Server technology that supports the creation, management, and delivery of both traditional, paper-oriented reports and interactive, web-based reports.
{count} votes

1 answer

Sort by: Most helpful
  1. Q&A Assist
    2025-12-18T13:43:25.0066667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    The error message "The login is from an untrusted domain and cannot be used with Integrated Authentication" typically indicates that there are issues with the trust relationship between the domains involved. This can happen after updates or changes to the network configuration, such as the Windows patches you mentioned.

    To resolve this issue, consider the following steps:

    1. Check Domain Trusts: Ensure that the domains are properly trusted and that the trust relationship has not been disrupted. You may need to verify the trust settings in Active Directory.
    2. User Group Membership: Make sure that users from the remote domain belong to a group in the SQL Server domain. If using a domain local group, this could lead to issues when trying to connect from another domain.
    3. Selective Authentication: If selective authentication is enabled, ensure that the users from the trusted domain have the necessary permissions to authenticate in the SQL Server domain.
    4. Service Principal Name (SPN): Verify that the SPN is registered correctly for the SQL Server service account. You can use the setspn command to check and register SPNs if necessary.
    5. Local Security Authority Subsystem Service (LSASS): If there are issues with LSASS, it may not be responding properly, which can lead to authentication failures. Check the system logs for any related errors and consider restarting the service if needed.

    If the issue persists after these checks, further investigation into the network configuration and domain settings may be required.


    References:

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.