Event ID: 4289 Unable to connect to server. Reason: Access is denied.
Article ID: 100048004
Updated On:
Description
Error Message
Event ID: 4289
Unable to connect to server 'alias.domain.COM' using Kerberos authentication.
Reason: Access is denied. (0x80070005)
The DCOM connection was attempted with: |CLSID: {F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A} (EnterpriseVault.DirectoryService.1)
Server name: alias.domain.COM
Server Principal Name: dcom/physicalservername.domain.com
The connection was made using WinNT authentication. Check that the server name identifies a known server.
There may be a problem with Kerberos authentication or a security issue. An unknown server could indicate a man-in-the-middle attack.
V-437-4289
Cause
A potential cause is that the credentials for the Enterprise Vault Service Account (VSA) were saved in Windows Credential Manager. Subsequent password changes for the VSA does not update the Credential Manager.
Resolution
Select Credential Manager from within the Windows Control Panel (as the VSA), and remove any saved credentials listed.
Issue/Introduction
