Event ID 1411

Recently I removed a DC from the domain.

There were lingering objects that I just could not remove.

I have now managed to remove the DC using /forceremoval on the dcpromo
command.

However, whilst there is no evidence of the DC in the AD as far as I can
tell, I am still getting an error in the event logs of the other DC's.

Event ID 1411, Category "DS RPC Client"

Active Directory failed to construct a mutual authentication service
principal name (SPN) for the following domain controller.

Domain controller:
a8771fa8-c060-4e91-9f5b-8600065ba918._msdcs.sads.com

The call was denied. Communication with this domain controller might be
affected.

Additional Data
Error value:
8589 The DS cannot derive a service principal name (SPN) with which to
mutually authenticate the target server because the corresponding server
object in the local DS database has no serverReference attribute.

Everything seems healthy apart from this error ... but I want to get the
domain all completely clean.

There is no info on the MS K/B regarding this and I guess I need to just
into ADSIEDIT or something to remove this.

Can any please advise ?

Many thanks,

jON

I already used that Gareth after I had done the dcpromo /forceremoval

After completing all of these steps successfully, this error occurs.

And I can find no info on it anywhere ...

I need to know how to remove this entity from the AD I suspect.

jON


"GarethBaxendale" <(E-Mail Removed)> wrote in
message news:535B0C52-DB57-4317-9600-(E-Mail Removed)...
> This articl may point you in the right direction...
> http://support.microsoft.com/default.aspx/kb/216498
>
> Hope that helps
> Thanks
> Gaz
>
> "Jon Rowlan" wrote:
>
>> Recently I removed a DC from the domain.
>>
>> There were lingering objects that I just could not remove.
>>
>> I have now managed to remove the DC using /forceremoval on the dcpromo
>> command.
>>
>> However, whilst there is no evidence of the DC in the AD as far as I can
>> tell, I am still getting an error in the event logs of the other DC's.
>>
>> Event ID 1411, Category "DS RPC Client"
>>
>> Active Directory failed to construct a mutual authentication service
>> principal name (SPN) for the following domain controller.
>>
>> Domain controller:
>> a8771fa8-c060-4e91-9f5b-8600065ba918._msdcs.sads.com
>>
>> The call was denied. Communication with this domain controller might be
>> affected.
>>
>> Additional Data
>> Error value:
>> 8589 The DS cannot derive a service principal name (SPN) with which to
>> mutually authenticate the target server because the corresponding server
>> object in the local DS database has no serverReference attribute.
>>
>> Everything seems healthy apart from this error ... but I want to get the
>> domain all completely clean.
>>
>> There is no info on the MS K/B regarding this and I guess I need to just
>> into ADSIEDIT or something to remove this.
>>
>> Can any please advise ?
>>
>> Many thanks,
>>
>> jON
>>
>>
>>

In news:u2%(E-Mail Removed),
Jon Rowlan <(E-Mail Removed)> stated, which I commented on below:
> I already used that Gareth after I had done the dcpromo /forceremoval
>
> After completing all of these steps successfully, this error occurs.
>
> And I can find no info on it anywhere ...
>
> I need to know how to remove this entity from the AD I suspect.
>
> jON

If you followed the article Garath provided and did not see any objects
associated with the failed DC, then I would look in ADUC under DCs to make
sure it is removed, as well as in Sites and Services/Sites/SiteName/Servers.
Manually delete any old references.

--
Ace
Innovative IT Concepts, Inc (IITCI)
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...