The operation failed because spn value provided for addition/modification is not unique forest-wide
This post describes how to fix the error:
The operation failed because spn value provided for addition/modification is not unique forest-wide
Cause
This error occurred when I demoted a child Active Directory domain controller then tried to rejoin the parent domain. I think the parent domain still had some record of the SPN which I was not able to delete. By default, Windows checks to ensure the SPN is unique.
Resolution
To resolve this issue, I disabled the uniqueness check as follows:
1. Open ADSI Edit.
2. Right click the ADSI Edit root node in the tree view on the left then select Connect to...
3. In Connection Settings, change the Naming Context to Configuration then press OK
4. Navigate down to CN=Windows NT then right click CN=Directory Service and select Properties
5. Double click dSHeuristics and change the value to 000000000100000000023 to disable the UPN and SPN uniqueness checks.
Related Posts
- The time between replications with this source has exceeded the tombstone lifetime
- Error 0x2015(The directory service can perform the requested operation only on a leaf object.)
- Windows cannot delete object LDAP://... because: A referral was returned from the server.
Comments
Post a Comment