SPN Health

Microsoft.Windows.Server.AD.DomainController.SPNHealth (Task)

This task confirms the SPN health on the target Domain Controllers. This task is useful for diagnosing replication authentication errors caused by non-existent, hijacked or duplicate SPN registrations

Element properties:

Target	Microsoft.Windows.Server.2012.R2.AD.DomainControllerRole
Accessibility	Public
Category	Maintenance
Enabled	True
Remotable	False
Timeout	300

Member Modules:

ID	Module Type	TypeId	RunAs
PA	ProbeAction	AD.Tasks.ProbeActionType	Default

Source Code:

<Task ID="Microsoft.Windows.Server.AD.DomainController.SPNHealth" Accessibility="Public" Enabled="true" Target="AD2012R2Core!Microsoft.Windows.Server.2012.R2.AD.DomainControllerRole" Timeout="300" Remotable="true">

  <Category>Maintenance</Category>

  <ProbeAction ID="PA" TypeID="AD.Tasks.ProbeActionType">

    <ApplicationName>DCDIAG.EXE</ApplicationName>

    <SupportToolsInstallDir>%SystemRoot%\System32\</SupportToolsInstallDir>

    <CommandLine>/test:MachineAccount /v</CommandLine>

    <TimeoutSeconds>1200</TimeoutSeconds>

  </ProbeAction>

</Task>