Failed to register Service Principal Name. This may blocks specific users from accessing their mailboxes.
Applies to: Operations Manager Management Pack for Exchange 2010
Topic Last Modified: 2011-08-02
The Microsoft Exchange Server 2010 Management Pack for System Center Operations Manager monitors the Windows Application log on computers running Exchange 2010 and generates this alert when the events specified in the following Details table are logged.
To learn more about this alert, in Operations Manager, do one or more of the following:
From the Operations Console, double-click this alert, and then click the General tab. Review the description of the alert that includes the variables specific to your environment.
From the Operations Console, double-click this alert, and then click the Alert Context tab. Review the logged events that meet the criteria of this Operations Manager alert.
Details
Product Name |
Exchange |
Product Version |
14.0 (Exchange 2010) |
Event ID |
9317 |
Event Source |
MSExchangeSA |
Alert Type |
Warning |
Rule Path |
Microsoft Exchange Server/Exchange 2010/Mailbox/System Attendant |
Rule Name |
Failed to register Service Principal Name. This may blocks specific users from accessing their mailboxes. |
Explanation
This Error event indicates that the Microsoft Exchange System Attendant service failed to register the service principal name (SPN) for the process specified in the event description. An SPN is a unique identifier for the services running on an Exchange server. Each service that needs Kerberos authentication must have an SPN so that clients can identify the service on the network. In Active Directory, an SPN is assigned to an account under which the corresponding service runs. By default, Microsoft Outlook and Microsoft Outlook Web Access clients are authenticated using the Kerberos authentication mechanism. If SPN registration fails, Kerberos authentication also fails, preventing Outlook and Outlook Web Access clients from getting authenticated to the Exchange services and preventing user logon to mailboxes.
User Action
To resolve this error, do one or more of the following:
Use the Services console to make sure that the Microsoft Exchange System Attendant service is in a Started state. If the service is already in a Started state, stop and then restart the service.
Make sure that the server that logged this event is properly registered on the Domain Name System (DNS) server. For more information about how to troubleshoot DNS issues, see Troubleshooting DNS servers.
An SPN is registered using a remote procedure call (RPC). Review other Warning events and Error events in the Application log to find out if there are RPC failures.
As a workaround, manually configure the SPN for the service specified in the event description. For more information about how to manually configure the SPN, see Service Logons Fail Due to Incorrectly Set SPNs.
If this error frequently occurs, contact Microsoft Product Support. For information, visit the Contact Us page of the Microsoft Help and Support Web site.
For More Information
If you are not already doing so, consider running the Exchange tools, which have been created to help you analyze and troubleshoot your Exchange environment. These tools can help make sure that your configuration aligns with Microsoft best practices. They can also help you identify and resolve performance issues and improve mail flow. To run these tools, go to the Toolbox node of the Exchange Management Console. To learn more about these tools, see Managing Tools in the Toolbox.