Failed to remove cached secrets of the following security principal from local domain controller: %1 Error: %2 (%3) After ...

Failed to remove cached secrets of the following security principal from local domain controller:

%1

Error: %2 (%3)
After cloning a read-only domain controller, secrets which were previously cached on the cloning source read-only domain controller need to be removed on the clone. Failed to do this will increase the risk that an attacker can obtain those credentials from stolen or compromised clone. If the security principal is a highly privileged account and should be protected against this, please use rootDSE operation rODCPurgeAccount to manually clear its secrets on local domain controller.