Windows Server

Spin · Guest

Experts,

What exactly is a service principal name in *layman's terms*? I need to
know that in order to troubleshoot the below event ID I am getting in my
logs.

Event Type: Warning
Event Source: Virtual Server
Event Category: Remote Control
Event ID: 1029
Date: 11/13/2005
Time: 10:04:31 AM
User: NT AUTHORITY\NETWORK SERVICE
Computer: Server1
Description:
The service principal name for the VMRC server could not be registered.
Automatic authentication will always use NTLM authentication. Error
0x80072098 - Insufficient access rights to perform the operation.

--
Spin

Paul Bergson · Guest

Are you running a virtual server on your dc? If so check out this KB for
help.

http://support.microsoft.com/default.aspx?scid=kb;en-us;890893

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

Spin · Guest

Yes I am running a virtual server on my dc. Thanks for the link. This
Virtual server running on my dc is a member server of another domain, so I
do not need it to register in AD. What is a service principal name? I know
what a security principal is, that is any object which you can give
permissions to on a resource (like being part of an ACL). But what exactly
is a service principal name? Layman's terms, please. :-)

--
Spin

Paul Bergson · Guest

Each time a service starts in an AD environment there has to be a Unique way
to identify it, hence the Service Principal Name.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/service_principal_names.asp

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.

Spin · Guest

Now is that every service running on a domain controller or is that only for
services authenticating against AD, such as Kerberos?

--
Spin

Paul Bergson · Guest

Any service running on a machine that has authenticated in the domain should
have a service principal name. If you recall ALL services need a user name
and password to run.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

Spin · Guest

That's great Paul. How can I determine the SPN for a service, is it easy?

--
Spin

Paul Bergson · Guest

I don't know, sorry.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

	Windows Server Forum Index -> Active Directory	All times are GMT
Page 1 of 1