Event ID - 1396

Event Id1396
Sourcesecurity
DescriptionLogon Failure: The target account name is incorrect.
Event InformationCause:

1.SPN for the domain that is hosting the replica has not been propagated.
2.Incorrect target account name or the server is not online.
3.If you have DFS, make sure the DFSRoot is available

Resolution:

To resolve this issue, wait for replication to complete before you create Active Directory directory service replicas.

If you cannot wait for replication to complete, use the domain administrator account from the domain that will contain the new replicas. Alternatively, make sure that all domain controllers in the root domain have replicated, and then create the replicas by using the root domain administrator account. To force replication, use tools such as Replmon.exe or Repadmin.exe. Replmon.exe and Repadmin.exe are included in the Windows 2000 Support Tools.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.