When I search using LDP(sorry, joe), I get 2 user accounts as a result. One is the builtin domain administrator account and the other is a member of the domain admins.
The spn is a ms sql server. The ms sql service runs under the domain administrator account. I don't know how the other account could register a spn with the same name? thanks joe wrote: >> o) > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob > Sent: Thursday, May 19, 2005 2:57 PM > To: [email protected] > Subject: RE: [ActiveDir] KDC error > > The joeware shine will never wear off :o) > > I sent that way too quick before the caffeine kicked in, damn > ctl-enter bites me again.. > > I meant to say "I *used* to use ldp like outlined in the KB before I > knew better" > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of joe > Sent: Thursday, May 19, 2005 10:52 AM > To: [email protected] > Subject: RE: [ActiveDir] KDC error > > Phew, I got worried when your previous post said LDP instead of > adfind/admod.... > > Thought my shine was wearing off. :o) > > > Oh, BTW, updated ADMOD was released last night. If anyone finds any > issues let me know. > > http://blog.joeware.net/cat/updates/ > > > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob > Sent: Thursday, May 19, 2005 12:32 PM > To: [email protected] > Subject: RE: [ActiveDir] KDC error > > Tom- If you don't want to use ldp as outlined in the KB, this works > for me :-) > > Watch for wrapping... > > > adfind -gc -b "" -f > "&(objectcategory=computer)(serviceprincipalname=MSSQLSvc/servername.dom > ain.tld.com:1433)" -dn > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob > Sent: Thursday, May 19, 2005 9:11 AM > To: [email protected] > Subject: RE: [ActiveDir] KDC error > >> How can I find out which servers are using this spn? > > I usually use ldp to locate it and setspn to delete the offender. > > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044 > >> Why does this occur? > > Sql DBA's are squirrelly? Sorry, but that's what I usually blame it > on. > >> Can it really screw things up? > > I usually only see it cause problems for the SQL servers having the > duplicate names. I've seen other apps register dupe spns but the > majority of the time it's SQL. Easy to remedy. > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom > Sent: Wednesday, May 18, 2005 8:25 AM > To: ActiveDir (E-mail) > Subject: [ActiveDir] KDC error > > I got this error on my GC- > > > Event Type: Error > Event Source: KDC > Event Category: None > Event ID: 11 > Date: 5/18/2005 > Time: 11:07:36 AM > User: N/A > Computer: GCServer > Description: > There are multiple accounts with name > MSSQLSvc/servername.domain.tld:1433 of type 10. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > How can I find out which servers are using this spn? LDP.exe? What's > the syntax? > Why does this occur? Can it really screw things up? > > Thanks a lot > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
