2013年8月30日 星期五

Active Directory 網域服務並未對另一個目錄伺服器執行已驗證的遠端程序呼叫 (RPC),因為目的地目錄伺服器所需的服務主體名稱 (SPN) 並未登錄在解析 SPN 的金鑰發佈中心 (KDC) 網域控制站上。

  1. Open a command prompt as an administrator. To open a command prompt as an administrator, click Start. In Start Search, type Command Prompt. At the top of the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. Run the command setspn -l hostname, where hostname is the actual host name of the domain controller. This command displays the SPNs that the domain controller has registered.
  3. Ensure that the domain name in each SPN listing is correct.
  4. If the SPNs are not correct, run the command repadmin /syncall domainname, where domainname is the name of the domain of the domain controller.
  5. Wait 15 minutes, and then run the setspn -l hostname command again and review the registered SPNs.


沒有留言: