Failed to query SPN registration

[Cheuk Man]

Hi, I have an AD-DNS integrated network with 3 DC. When I
ran "netdiag /fix" on one of the DC, the LDAP passed with
the following warning:

[WARNING] Failed to query SPN registration on DC1.
[WARNING] Failed to query SPN registration on DC2.
[WARNING] Failed to query SPN registration on DC3.

What should I do? Any help would be appreciated!

Warmest regards.

 

[Ace Fekay [MVP]]

In

Hi, I have an AD-DNS integrated network with 3 DC. When I
ran "netdiag /fix" on one of the DC, the LDAP passed with
the following warning:

[WARNING] Failed to query SPN registration on DC1.
[WARNING] Failed to query SPN registration on DC2.
[WARNING] Failed to query SPN registration on DC3.

What should I do? Any help would be appreciated!

Warmest regards.

This can be caused by many different factors.

SPNs are based on the FQDN of a resource. So machine.yourdomain.com is an
SPN but the IP address of it is not. This would be soley due to missing SRV
records in DNS that AD requires.

So what's your infrastructure setup?
Are there any NATs or firewalls between the DCs? One subnet or mutliple
sites/subnets?
What DNS servers are you using?
Do the SRV records show up under the zone name in DNS?

Probably to better help us narrow it down or eliminate some stuff, can you
provide an (unedited or changed) ipconfig /all of all three DCs to help us
better to diagnose this?

Thanks


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory