There are multiple accounts with name MSSQLsvc/ad.domain of type DS_SERVICE_PRINCIPAL_NAME

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Win2003 SP1 + SQL 2000 SP3

Sometimes, i have to restart SQL Server, because new users (on their regular
PCs) cannont connecto to SQL. I have 100 SQL CAL licences, and 45-65 users.
Sometimes a user disconnects, change to another's one PC and can connect.

Maybe there is a relation with recent Event IDs on the Logs

On the Log:
Event ID 11 Source KDC There are multiple accounts with name
MSSQLsvc/ad.domain of type DS_SERVICE_PRINCIPAL_NAME.



setspn -L %computername%

Registered ServicePrincipalNames for CN=corp,OU=Domain
Controllers,DC=corpc,DC=com,DC=br
MSSQLSvc/corp.corpc.com.br:1433
NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/corp.corpc.com.br
DNS/corp.corpc.com.br
HOST/corp.corpc.com.br/corpc.com.br
HOST/corp.corpc.com.br/corpC
GC/corp.corpc.com.br/corpc.com.br
ldap/corp.corpc.com.br/corpC
ldap/corp.corpc.com.br
ldap/corp.corpc.com.br/ForestDnsZones.corpc.com.br
ldap/corp.corpc.com.br/DomainDnsZones.corpc.com.br
ldap/corp.corpc.com.br/corpc.com.br
HOST/corp.corpc.com.br
HOST/corp
ldap/corp

E3514235-4B06-11D1-AB04-00C04FC2DCD2/c23c951a-7855-490d-8781-4c9c5c5a43eb/co
rpc.com.br
ldap/c23c951a-7855-490d-8781-4c9c5c5a43eb._msdcs.corpc.com.br







.

Relevant Pages

  • Re: testing vulnerable web application.
    ... You should be able to just open up your logs and look for things that are out of the ordinary. ... Keep your database and all but double check it to make sure there really aren't accounts and what not that should not be there. ... We assumed the attacker was using some sort of SQL injection to alter the DB records or possibly he can craft a SQL query in a way that will create an admin account to use to simply log in and alter the records and then delete his username...NO rogue admin accounts have ever been found. ... You have an option to go with a managed service or an enterprise software. ...
    (Pen-Test)
  • Re: Unable to start SQL SERVER service for a SQL EXPRESS instance.
    ... Event Viewer, as you directed), so that's what that said. ... As for the SQL Error Log, there don't appear to be ANY logs. ... Now, it won't install completely. ...
    (microsoft.public.sqlserver.clients)
  • Re: Getting Started - RAID, Multiple Instances, SQL 2000-2005 . . .
    ... SQL 2000 Std. ... Data and Logs on RAID 5 partition ... Planning to put OS on RAID 1 partition, logs on different RAID 1 partition, ...
    (microsoft.public.sqlserver.setup)
  • Re: Does NTBackup backup SQL Express?
    ... In which case I assume the logs do NOT get flushed so this is not an option ... as I know enough that the logs must be flushed during every full backup. ... and the SBS server I regularly use runs MySQL not SQL ... I've always scripted my SQL Server backups separatly. ...
    (microsoft.public.windows.server.sbs)
  • Re: Tracing Web service calls
    ... Message logs. ... I beleive IBM have created such a tool for their web service ... No SQL database blocking. ...
    (microsoft.public.dotnet.framework.aspnet)