Event Id | 1645 |
Source | NTDS Replication |
Description | The Directory Service received a failure while trying to perform an authenticated RPC call to another Domain Controller. The failure is that the desired Service Principal Name (SPN) is not registered on the target server. The server being contacted is domain_name.com. The SPN being used is GC/Global_Catelog.com/domain.com. Please verify that the names of the target server and domain are correct. Please also verify that the SPN is registered on the computer account object for the target server on the KDC servicing the request. If the target server has been recently promoted, it will be necessary for knowledge of this computers identity to replicate to the KDC before this computer can be authenticated. |
Event Information | On a domain controller or on a global catalog server that is running Microsoft Windows 2000, Active Directory directory service replication may not be completed correctly with one or more partners, and the following event may appear in the event log. CAUSE : This issue may occur when a replicated naming context is deleted while at least one domain controller that is hosting that domain is available. When this situation occurs, the NCname attribute for the Crossref object of the domain that is affected points to the naming context object (NChead). However, the naming context object has already been deleted. This condition prevents replication. RESOLUTION : Service pack information To resolve this problem, obtain the latest service pack for Microsoft Windows 2000. |
Reference Links | Active Directory replication may not be completed correctly with one or more partners on a domain controller or on a global catalog server that is running Windows 2000 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.