Re: Cannot resolve KDC error 11


Hi Thorsten,

Thank you for posting SBS newsgroup.

Based on my research, this behavior may be caused by there are two or more
computer accounts that have the same service principal names (SPNs)
registered.

To resolve the issue, we need to locate the machine accounts that have the
duplicate SPNs. To do so, please refer to the following KB article:

321044 Event ID 11 in the system log of domain controllers
http://support.microsoft.com/?id=321044

216498 How to remove data in Active Directory after an unsuccessful domain
http://support.microsoft.com/?id=216498

250455 How to Change Display Names of Active Directory Users
http://support.microsoft.com/?id=250455

In addition, the following KB for your reference:

237677 Using LDIFDE to Import and Export Directory Objects to Active
Directory
http://support.microsoft.com/?id=237677

273863 How to Change the LegacyExchangeDN Attribute in Native Mode with ADSI
http://support.microsoft.com/?id=273863

I hope the above information helps, please try the above steps and let me
know the result at your earliest convenience. I am looking forward to your
reply!

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Cannot resolve KDC error 11
| | From: =?Utf-8?B?VGhvcnN0ZW4gQ2hsdXBw?=
<ThorstenChlupp@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <ABDA44BB-7F7B-4474-A213-C7F8AD0B3650@xxxxxxxxxxxxx>
<utL4MjpXFHA.1148@xxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Cannot resolve KDC error 11
| Date: Sun, 22 May 2005 14:45:20 -0700
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| Thanks for the link - I will try my luck there...
|
| "Levent Onen" wrote:
|
| > Thorsten Chlupp wrote:
| > > After installing CRM 1.2 on my SBS Server I receive KDC error 11:
| > >
| > > â?¢ There are multiple accounts with name cifs/RPC-SERVER of type
| > > DS_SERVICE_PRINCIPAL_NAME.
| > >
| > > â?¢ There are multiple accounts with name host/rpc-server.reina.local
of type
| > > DS_SERVICE_PRINCIPAL_NAME.
| > >
| > > I did a search here and on the CRM forum and tried to fix this by
following
| > > previous suggestions with ldifde, LDP and ADSEIdit but could not get
this
| > > figured out yet as I am unfortunately no IT wiz... Its seems to me
like
| > > cn:Thorsten Chlupp is the duplicate service principal name causing
the
| > > problem â?? but how do I find the duplicate entry in ADSIEdit and
what do I
| > > need to delete?
| > > As this interferes with the SBS backup I really need to get it
resolved soon
| > > and greatly appreciate any help. Following the LDP output:
| > >
| > > ***Searching...
| > > ldap_search_s(ld, "DC=REINA,DC=local", 2,
| > > "serviceprincipalname=Host/rpc-server.reina.local", attrList, 0,
&msg)
| > > Result <0>: (null)
| > > Matched DNs:
| > > Getting 2 entries:
| > >
| > >>>Dn: CN=RPC-SERVER,OU=Domain Controllers,DC=REINA,DC=local
| > >
| > > 5> objectClass: top; person; organizationalPerson; user; computer;
| > > 1> cn: RPC-SERVER;
| > > 1> distinguishedName: CN=RPC-SERVER,OU=Domain
Controllers,DC=REINA,DC=local;
| > > 1> name: RPC-SERVER;
| > > 1> canonicalName: REINA.local/Domain Controllers/RPC-SERVER;
| > >
| > >>>Dn: CN=Thorsten
Chlupp,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=REINA,DC=local
| > >
| > > 4> objectClass: top; person; organizationalPerson; user;
| > > 1> cn: Thorsten Chlupp;
| > > 1> description: Administrator;
| > > 1> distinguishedName: CN=Thorsten
| > > Chlupp,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=REINA,DC=local;
| > > 1> name: Thorsten Chlupp;
| > > 1> canonicalName: REINA.local/MyBusiness/Users/SBSUsers/Thorsten
Chlupp;
| > >
| > > Thank you for your time. TC
| > >
| > Thorsten,
| >
| > I would recommend trying the sbs and smb focused crm group on yahoo
| > groups --> http://groups.yahoo.com/group/mscrm_smb/
| >
|

.

Relevant Pages

  • Re: SBS 2003 information
    ... I wanted to know if you export Active Directory if it also exports the ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Add contacts to SBS users programatically
    ... > Thank you for posting in the SBS newsgroup. ... > contacts into Active Directory SBS Users list through program. ... Use Microsoft Excel to open this .csv file, ...
    (microsoft.public.windows.server.sbs)
  • RE: Install problem
    ... It also can be applied to SBS 2K3 Server. ... 308592 How Dcpromo.exe Adds Display Specifiers to Active Directory Forests ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot resolve KDC error 11
    ... I searched through a few Newsgroups and MS articles before I posted and this ... > 250455 How to Change Display Names of Active Directory Users ... > Microsoft CSS Online Newsgroup Support ... Cannot resolve KDC error 11 ...
    (microsoft.public.windows.server.sbs)
  • RE: Adding SBS2003
    ... > Thank you for posting to the SBS Newsgroup. ... > 884453 How to install Small Business Server 2003 in an existing Active ... > Install Active Directory on the Additional Domain Controllers ...
    (microsoft.public.windows.server.sbs)
Loading