ERROR_DS_CANT_DERIVE_SPN_FOR_DELETED_DOMAIN 0x8007219B

Error code 8603 · HRESULT 0x8007219B

WINDOWS

The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server because the server's domain has been deleted from the forest.

Windows troubleshooting diagram: Device Manager warning and a system file scan
Windows errors: check drivers, system files and Event Viewer, in that order.

What it means

ERROR_DS_CANT_DERIVE_SPN_FOR_DELETED_DOMAIN is a Windows error code (system error 8603, returned as HRESULT 0x8007219B) reported by Windows. Its official message is: “The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server because the server's domain has been deleted from the forest.”

How to fix ERROR_DS_CANT_DERIVE_SPN_FOR_DELETED_DOMAIN

  1. Run the affected program as administrator (right-click → Run as administrator)
  2. Check permissions on the target resource: Properties → Security → your account
  3. Check Event Viewer → Windows Logs → Security for the matching audit entry

Related errors

ERROR_DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REFERROR_DS_CANT_DEMOTE_WITH_WRITEABLE_NCERROR_DS_CANT_MOVE_APP_BASIC_GROUPERROR_DS_CANT_MOVE_APP_QUERY_GROUPERROR_DS_CROSS_REF_BUSYERROR_DS_REMOTE_CROSSREF_OP_FAILEDERROR_DS_DUPLICATE_ID_FOUND

Source: Microsoft WinError.h

Last updated: