Windows Server

Terje Sundbøe · Guest

Hello,

I get multiple error messages with event id 11 from source kdc. The error
is:

There are multiple accounts with name MSSQLSvc/server3.domain1.no:1433 of
type DS_SERVICE_PRINCIPAL_NAME.

I have run the ldp tool, and search the directory for:
serviceprincipalname=MSSQLSvc/server3.domain1.no. with this result::

ldap_search_s(ld, "DC=domain1,DC=no", 2,
"serviceprincipalname=MSSQLSvc/server3.domain1.no", attrList, 0, &msg)
Result <0>: (null)
Matched DNs:
Getting 0 entries:

Does anybody have any idea of how to locate these multiple accounts

Terhe

Paul Williams [MVP] · Guest

Change the criteria to:

(servicePrincipalName=MSSQLSvc*)

Ensure that the base is your domain (dc=domain-name,dc=com) and that your
scope is subtree.

You'll probably find that this duplicate entry is on the Administrator
account.

Use SETSPN.EXE to delete. (you might want to backup the attribute first, by
exporting it using LDIFDE.EXE)

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net

	Windows Server Forum Index -> Active Directory	All times are GMT
Page 1 of 1