| Event Id | 1029 |
| Source | Virtual Server |
| Description | The service principal name for the VMRC server could not be registered. Automatic authentication will always use NTLM authentication. Error 0x80072098 - Insufficient access rights to perform the operation. |
| Event Information | According to Microsoft: CAUSE : This issue occurs because the Network Service account that Virtual Server uses does not have permission to write the SPNs to Active Directory. Therefore, the SPN for vssrvc/Computer_Name and vssrvc/Fully_Qualified_Domain_Name are not registered in Active Directory. RESOLUTION : To resolve this issue, follow these steps to use ADSI Edit to manually register the SPNs. Warning :If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk. 1. Install the Windows Server 2003 Support Tools. To do this, follow these steps: a. Insert the Windows Server 2003 product CD into your CD drive. b. Click Start, click Run, and then click Browse. c. Locate the CD_Drive:\Support\Tools folder. d. In the Files of Type list, click All Files. e. Click SUPTOOLS.MSI, click Open, and then click OK. f. Follow the directions in the Windows Support Tools Setup Wizard. 2. Click Start, click Run, type adsiedit.msc, and then click OK. 3. In ADSI Edit, expand Domain, Your_Domain_Name, expand DC=Domain_Name,DC=Root, and then click OU=Domain Controllers. 4. In the details pane, right-click the name of the domain controller where Virtual Server is installed, and then click Properties. 5. In the Attributes list, click servicePrincipalName, and then click Edit. 6. In the Value to add box, type vssrvc/Your_Computer_Name, and then click Add. 7. In the Value to add box, type vssrvc/Your_Domain.Yo |
| Reference Links | The SPNs that Virtual Server requires are not registered in Active Directory when you try to install Virtual Server 2005 on a Windows-based domain controller |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.