Re: Der Versuch die HOST-SPNs (Service Principal Names) des Computers im Active Directory zu aktualisieren ist fehlgeschlagen

From: Michael Wirth [MS] (mwirth_at_online.microsoft.com)
Date: 08/30/04 

Date: Mon, 30 Aug 2004 08:31:38 +0200

"Dirk Löffler" <anonymous@discussions.microsoft.com> wrote in message news:Op4VNRDjEHA.3896@TK2MSFTNGP10.phx.gbl...
> Im Augenblick scheint der Fehler nicht mehr aufzutreten. Ich werds noch
> einige Tage beobachten.
> Wie kann ich das prüfen, ob der das connection-specific suffix in sein SPN
> Attribut eingebaut hat? In "Nezwerkidentifikation" stand es schon drin.

Mit SETSPN -L "maschinenname" kannst Du die registrierten SPN's einer Maschine
auslesen. 

-- 
Michael Wirth
Microsoft Services
This posting is provided "AS IS" with no warranties
and confers no rights. You assume all risk for your use.
© 2004 Microsoft Corporation. All rights reserved.

Relevant Pages

  • Re: "Account is trusted for delegation" is not shown
    ... Did you install the support tools to run setspn? ... Where SPN is the servicename/computername ... account with the Setspn utility in the support tools on your CD. ... It should be caused by raising functional level to windows 2003. ...
    (microsoft.public.windows.server.general)
  • Re: "Account is trusted for delegation" is not shown
    ... Did you install the support tools to run setspn? ... Where SPN is the servicename/computername (MESSENGER/SERVERNAME for ... account with the Setspn utility in the support tools on your CD. ... It should be caused by raising functional level to windows 2003. ...
    (microsoft.public.windows.server.general)
  • SETSPN breaks access to IIS web site
    ... I used SETSPN to create a servicePrincipalName for the account I'm ... To confirm that SETSPN was the problem, I deleted the SPN using SETSPN ... IIS server, which was a member of Administrators on the server, could ...
    (microsoft.public.win2000.security)
  • RE: Integrated Security fails using machine name, succeeds using FQN
    ... I think you have an SPN problem. ... by running setspn -l domain\user. ... If your app pool is running under a system account, ... registered for the DNS alias to the machine name by running setspn -l foobar. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Remove Delegation Tab on user object
    ... As you suggested I made some tests using the SETSPN tool provided by MS on ... HOST/{AD username} ... The SETSPN tool also provides an option to remove the SPN assigned to the ... the tab will go away. ...
    (microsoft.public.windows.server.active_directory)