KDC SETSPN duplicate which one to delete?

-

ok, got darn error many people do:

the kdc encountered duplicate names while processing kerberos authentication request. duplicate name mssqlsvc/waisbs.wireassoc.local:23936 (of type ds_service_principal_name). may result in authentication failures or downgrades ntlm. in order prevent occuring remove duplicate entries mssqlsvc/waisbs.wireassoc.local:23936 in active directory.

ran setspn, unsure one(s) remove...

c:\windows\system32>setspn -x
processing entry 0
mssqlsvc/waisbs.wireassoc.local:23936 registered on these accounts:
        cn=sbs services account,ou=sbsusers,ou=users,ou=mybusiness,dc=wireassoc,dc=local
        cn=joe nike,ou=sbsusers,ou=users,ou=mybusiness,dc=wireassoc,dc=local

{14e52635-0a95-4a5c-bdb1-e0d0c703b6c8}/waisbs registered on these accounts:
        cn=sbs services account,ou=sbsusers,ou=users,ou=mybusiness,dc=wireassoc,dc=local
        cn=joe nikek,ou=sbsusers,ou=users,ou=mybusiness,dc=wireassoc,dc=local
        cn=waisbs,ou=domain controllers,dc=wireassoc,dc=local

{14e52635-0a95-4a5c-bdb1-e0d0c703b6c8}/waisbs.wireassoc.local registered on these accounts:
        cn=sbs services account,ou=sbsusers,ou=users,ou=mybusiness,dc=wireassoc,dc=local
        cn=joe nike,ou=sbsusers,ou=users,ou=mybusiness,dc=wireassoc,dc=local
        cn=waisbs,ou=domain controllers,dc=wireassoc,dc=local

found 3 groups of duplicate spns.

1 correct remove?

thanks

hi,

can go throug these discussions , see if fixes doubts?

http://forums.techarena.in/active-directory/1142538.htm

http://msdn.microsoft.com/en-us/library/ms178119.aspx

http://social.technet.microsoft.com/forums/en/winservergen/thread/09a86d74-de48-4bda-9cc9-435da4f59910

 

ketan thakkar | microsoft online community support


Windows Server  >  Windows Server General Forum



Comments

Post a Comment

Popular posts from this blog

Motherboard replacement

-
running windows 10 technical preview, need replace motherboard can run the  sysprep  command restoring pc ? or there easier  or more preferred way ? thanks if replace motherboard within same family of chipsets (i.e. intel > intel or amd > amd), should okay restarting pc twice. carey frisch Windows 10 Insider Preview  >  Windows 10 Insider Preview General
Read more

Cannot create Full Text Search catalog after upgrading to V12 - Database is not fully started up or it is not in an ONLINE state

-
in order access new full text search capiblities of sql azure, upgraded our azure sql v12. (a day later), when try create new catalog: create fulltext catalog mycatalog default i following message: msg 9972, level 16, state 100, line 1 database not started or not in online state. try full-text ddl command again after database started , becomes online. hi scott, apologies inconvenience caused you. known issue on service side , fix going included in next update. specific case mitigated, should able use full-text search syntax now. thanks, mihaela Microsoft Azure  >  Azure SQL Database
Read more

Remote Desktop App - Error 0x207 or 0x607

-
hi all, i manage windows 2012 r2 network, including connection broker, session hosts , remote apps virtual servers.  i've used remote desktop app on own android phone, no issues @ - connects published gateway url , can login , access network. we looking move business onto nokia handsets ms operating system (currently on blackberry), not able connect via remote desktop app on nokia lumia handset. setup, per android config , brings remote apps , remote desktop screen, know can connect.  when select remote desktop, shows following process: initiating remote connection securing remote connection certificate can't verified - choose connect it digitally signed cert (digicert sha2), pc name different physical connection broker name (inherited domain name old gov project - can't publish publicly) initiating establishing securing connection error have been 0x207 getting 0x607 a bit baffled, work on android (and ipad @ home using app). assume ms use d...
Read more