Error 8589: ERROR_DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF
Windows Error Code Lookup: Decode Windows error codes: Win32, HRESULT (0x80070005), NTSTATUS, Windows Update, msiexec and blue-screen stop codes, with what to check next.
Paste the number from an error dialog, event log, script or setup log: 0x80070005, 80070005,
-2147024891, 1603, 0xC0000005, a stop code like 0x7E, a name like
E_ACCESSDENIED, or a few words. You get every way Windows could mean that number (an HRESULT often wraps a
Win32 error, so 0x80070005 is "Access is denied" too), its parts decoded, and what to check for the common ones. Names
and messages come from the Windows SDK headers and Windows' own message tables; see Microsoft's
System Error Codes and
[MS-ERREF] for the full references.
Try: 0x80070005, 1603, 0xC0000005, 0x800F081F, 0x8024402C, 0x7E, access denied
0x0000218D = 8,589
Win32 error 8589 (0x218D)
The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server because the corresponding server object in the local DS database has no serverReference attribute.
As an HRESULT (HRESULT_FROM_WIN32): 0x8007218D