Skip to content

Updating spn-and-upn-uniqueness #6210

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
+2 −2
Open

Updating spn-and-upn-uniqueness #6210

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b9c5813
Update SPN-and-UPN-uniqueness.md
archeon1004 Jan 5, 2022
e2b1530
Merge branch 'MicrosoftDocs:main' into master
archeon1004 Jan 11, 2022
391d8a8
Merge branch 'MicrosoftDocs:main' into main
archeon1004 Jan 20, 2022
0655fa2
Merge branch 'MicrosoftDocs:main' into main
archeon1004 Jul 7, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions ...owsServerDocs/identity/ad-ds/manage/component-updates/SPN-and-UPN-uniqueness.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,15 +38,15 @@ Duplicate UPN values break synchronization between on-premises AD and Office 365
For more information about uniqueness requirements for UPNs and SPNs, see [Uniqueness Constraints](/openspecs/windows_protocols/ms-adts/3c154285-454c-4353-9a99-fb586e806944).

## Symptoms
Error codes 8467 or 8468 or their hex, symbolic or string equivalents are logged in various on-screen dialogues and in event ID 2974 in the Directory Services event log. The attempt to create a duplicate UPN or SPN is blocked only under the following circumstances:
Error codes 8647 or 8648 or their hex, symbolic or string equivalents are logged in various on-screen dialogues and in event ID 2974 in the Directory Services event log. The attempt to create a duplicate UPN or SPN is blocked only under the following circumstances:

- The write is processed by a Windows Server 2012 R2 DC

**Table SEQ Table \\\* ARABIC 2: UPN and SPN uniqueness error codes**

|Decimal|Hex|Symbolic|String|
|-----------|-------|------------|----------|
|8467|21C7|ERROR_DS_SPN_VALUE_NOT_UNIQUE_IN_FOREST|The operation failed because SPN value provided for addition/modification is not unique forest-wide.|
|8647|21C7|ERROR_DS_SPN_VALUE_NOT_UNIQUE_IN_FOREST|The operation failed because SPN value provided for addition/modification is not unique forest-wide.|
|8648|21C8|ERROR_DS_UPN_VALUE_NOT_UNIQUE_IN_FOREST|The operation failed because UPN value provided for addition/modification is not unique forest-wide.|

## New user creation fails if UPN is not unique
Expand Down