| Event Id | 662 |
| Source | Microsoft-Windows-ADFS |
| Description | The Federation Service encountered an error while attempting to update the Windows trust cache. |
| Event Information | According to Microsoft : Cause : This event is logged when the Federation Service never successfully built the Windows trust cache. Therefore, tokens that are issued by account partners that use a Windows trust will be rejected until the update completes successfully. The next attempt at a cache update will occur in %1 minutes. Resolution : If this error persists, verify that the Windows trust relationships are functional. To verify that the Windows trust is working as designed or that communications over the trust are working, you can use either the Windows interface or the command line. To complete these procedures, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory Domain Services (AD DS). To check that the Windows trust relationships are functional using the Windows interface: 1.Open Active Directory Domains and Trusts. 2.In the console tree, right-click the domain that contains the trust that you want to validate, and then clickProperties. 3.On theTrusts tab, under eitherDomains trusted by this domain (outgoing trusts) or Domains that trust this domain (incoming trusts), click the trust to be validated, and then clickProperties. 4.Click Validate. 5.Do one of the following, and then clickOK: *ClickNo, do not validate the incoming trust. If you click this option, we recommend that you repeat this procedure for the reciprocal domain. *ClickYes, validate the incoming trust. If you click this option, you must type a user account and password with administrative credentials for the reciprocal domain. |
| Reference Links | Event ID 662 from Source Microsoft-Windows-ADFS |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.