Exception is raised while trying to remove cached secrets from local domain controller. Additional data: Exception value: ...

Exception is raised while trying to remove cached secrets from local domain controller.

Additional data:

Exception value: %1

Error value: %2

DSID: %3
After cloning a read-only domain controller, secrets which were previously cached on the cloning source read-only domain controller need to be removed on the clone. Failed to do this will increase the risk that an attacker can obtain those credentials from stolen or compromised clone. If any of these security principals is a highly privileged account and should be protected against this, please use rootDSE operation rODCPurgeAccount to manually clear its secrets on local domain controller.