When attempting to open the GPOADmin Console installed on a remote server, the following error message is displayed:
The server has rejected the client credentials
This issue occurs when the affected user account is a member of the Protected Users security group.
Verify that the Service Principal Name (SPN) is correctly configured with the GPOADmin server hostname and port number by running the following command:
setspn -L <GPOADminServiceAccount>
Review the output and confirm that an SPN similar to the following is present:
GPOADmin/<GPOADmin Server FQDN>:40200
If the SPN is missing or incorrectly configured, run the following command to register the correct SPN:
setspn -s GPOADmin/<GPOADmin Server FQDN>:40200 <GPOADminServiceAccount>
