| Event Id | 1067 |
| Source | Microsoft-Windows-TerminalServices-RemoteConnectionManager |
| Description | The terminal server cannot register 'TERMSRV' Service Principal Name to be used for server authentication. The following error occured: %1. |
| Event Information | According to Microsoft : Cause : This event is logged when the terminal server cannot register "TERMSRV" service principal name to be used for server authentication. Resolution : Register the Service Principal Name for the terminal server To resolve this issue, manually register the Service Principal Name (SPN) for the terminal server. Note : Note: Terminal Services attempts to register the SPN every time the computer is started. To register the SPN, the terminal server must be able to contact an Active Directory domain controller. If the SPN is not registered, Kerberos authentication will not be available for client connections. NTLM authentication can be used if it has not been disallowed by the administrator. To perform this procedure, you must have membership in the Domain Admins group in the domain, or you must have been delegated the appropriate authority. To register the SPN: 1.On the terminal server, open a Command Prompt window. To open a Command Prompt window, click Start, click Run, type cmd, and then click OK. 2.At the command prompt, type setspn -A host ServicePrincipalName (where host is the name of the terminal server and ServicePrincipal Name is the SPN to register), and then press ENTER. Note: After you have successfully registered the SPN, you might see that Event ID 1067 is still being logged, stating that the terminal server cannot register the SPN. You can ignore Event ID 1067 in those cases. Verify : To verify that connections to the terminal server are working properly, establish a remote session with the terminal server. |
| Reference Links | Event ID 1067 from Source Microsoft-Windows-TerminalServices-RemoteConnectionManager |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.