Microsoft KB Archive/890893

= The SPNs that Virtual Server requires are not registered in Active Directory when you try to install Virtual Server 2005 on a Windows-based domain controller =

Article ID: 890893

Article Last Modified on 11/2/2007

-

APPLIES TO


 * Microsoft Virtual Server 2005 Standard Edition

-





SYMPTOMS
When you try to install Microsoft Virtual Server 2005 on a domain controller that is running Microsoft Windows, the service principal names (SPNs) that Virtual Server requires are not registered in Active Directory.



CAUSE
This issue occurs because the Network Service account that Virtual Server uses does not have permission to write the SPNs to Active Directory. Therefore, the SPN for vssrvc/  and vssrvc/  are not registered in Active Directory.



RESOLUTION
You can safely ignore this error if the SPNs are already registered in Active Directory. To determine whether the SPNs have been registered, you can use the Setspn command at the command prompt, for example:

setspn -L

If the SPN's have been registered in Active Directory, the following output is displayed:

vssrvc/

vssrvc/

vmrc/

If the SPNs have are not registered in Active Directory, you can use Active Directory Service Interfaces (ADSI) Edit or Set spn at the command prompt to manually register the SPNs. To do this, follow these steps:

Warning If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.  Install the Windows Server 2003 Support Tools. To do this, follow these steps:  Insert the Windows Server 2003 product CD into the CD drive. Click Start, click Run, and then click Browse. Locate the :\Support\Tools folder. In the Files of Type list, click All Files. Click SUPTOOLS.MSI, click Open, and then click OK.</li> Follow the directions in the Windows Support Tools Setup Wizard.</li></ol> </li> Click Start, click Run, type adsiedit.msc, and then click OK.</li> In ADSI Edit, expand Domain, , expand DC= ,DC= , and then click OU=Domain Controllers.</li> In the results pane, right-click the name of the domain controller where Virtual Server is installed, and then click Properties.</li> In the Attributes list, click servicePrincipalName, and then click Edit.</li> In the Value to add box, type vssrvc/, and then click Add.</li> In the Value to add box, type vssrvc/. , click Add, and then click OK.</li></ol>

Alternatively, use the setspn command to modify the SPNs. For example, run commands that resemble the following at the command prompt:
 * setspn /A vssrvc/ 
 * setspn /A vssrvc/ 
 * setspn /A vmrc/ : 

Additional query words: NT Authority\Network Service

Keywords: kbtshoot kbprb KB890893

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.