Share via

AD Troubleshooting: Replication - the target principal name is incorrect

  • Article

Background

This is a regular AD-replication issue, many of us face very often. Most of the articles i found online recommend to stop KDC Service, reset Machine Password of the Computer AD-Account and perform a reboot. But in this article i will describe a way without performing a reboot, so there is only a minimal impact.

 

Error message and code

Error-Message: the target principal name is incorrect

Error-Code: 2148074274

Troubleshooting Steps

  1. First of all Stop the KDC Service on the affected Domain Controller

  2. Try a manual replication over the AD GUI on the affected (faulty) Domain Controller (in my scenario it only worked sometimes)

  3. Replicate the Configuration and domain Partition manually via cmdline on the affected Domain Controller:

    repadmin /replicate "Destination-DC / faulty DC" "Source-DC / working Replication-Partner" "Domain LDAP Name"

  4. Restart KDC Service

  5. Wait for the Replication being finished

  6. Check Replication Status via repadmin /showrepl on the affected Domain Controller

With these Steps you can successfully solve the AD-Replication Error without any Reboots and nearly no impact to any users at the affected Site!