Directory Service Event error: “Active Directory Failed to construct a mutual authentication service principal name (SPN)"


i’m in process of upgrading our single windows 2003 r2 active directory infrastructure windows server 2008 r2. have 10 domain controllers located @ various sites.

i have upgraded 6 of 10 dc’s windows server 2008 r2 no issues. need keep same name/ip’s i’ve been demoting windows 2003 dc, giving new name/ip , promoting new windows server 2008 r2 dc replacement old name/ip.

this morning noticed following event log on windows 2003 dc. dc reports error. appears report against dc upgraded windows server 2008 r2 yesterday.

if perform repadmin /replsum replication appears work correctly. can connect sysvol share on source , destination servers typing net view \\xyzdc.

is error message of concern?

it sounds kcc (istg) hasn't completed rebuilding of sites , services if has been more than a day rather puzzling.
http://support.microsoft.com/kb/938704

try running complete set of diagnostics , report on errors can't resolve.
http://blogs.dirteam.com/blogs/paulbergson/archive/2009/01/26/troubleshooting-active-directory-issues.aspx

--
paul bergson
mvp - directory services
mcitp: enterprise administrator
mcts, mct, mcse, mcsa, security+, bs csci
2008, vista, 2003, 2000 (early achiever), nt4
http://www.pbbergs.com    twitter @pbbergs
http://blogs.dirteam.com/blogs/paulbergson

please no e-mails, questions should posted in newsgroup. posting provided "as is" no warranties, , confers no rights.



Windows Server  >  Directory Services



Comments

Popular posts from this blog

Group Policy Event ID 1058 Error Code 1326 (The user name or password is incorrect)

Suspicious event log Event ID: 4905

DCOM received error "2147746132" from...