Cannot transfer FSMO roles

[Jeroen Jordens]

Hi,

After removing and re-adding a server to AD, I had to
follow KB article 232070 to allow the server to be added
in to AD.
This all worked, but trying to transfer FSMO roles I get
the following:

Using ntdsutil, I get the following error:

DsBindW error 0x80090332(The security context could not be
established due to a failure in the requested quality of
service (e.g. mutual authentication or delegation).)

Cheers,

Jeroen

 

[Richard McCall [MSFT]]

Sounds like SPN issues. Check replication. Check the machine accounts for
trusted for delegation,

 

[Jeroen Jordens]

Dead right.
I jumped the gun and attempted all this before letting
replication finish properly.
Had lunch - it all works perfectly now.

Have had such an enormous headache with this AD stuff I
panicked.

Thank you

Jeroen

-----Original Message-----
Sounds like SPN issues. Check replication. Check the machine accounts for
trusted for delegation,

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."

Hi,

After removing and re-adding a server to AD, I had to
follow KB article 232070 to allow the server to be added
in to AD.
This all worked, but trying to transfer FSMO roles I get
the following:

Using ntdsutil, I get the following error:

DsBindW error 0x80090332(The security context could not be
established due to a failure in the requested quality of
service (e.g. mutual authentication or delegation).)

Cheers,

Jeroen

.