Re: ktpass changed my UPN

Tech-Archive recommends: Fix windows errors by optimizing your registry

Couple of issue with your command. First there needs to be an @ in there. Second the domain should be all uppercase.

Finally, I wanted to see the command because ktpass is usually used by folks to generate keytabs, I hadn't heard of someone doing other things with it; especially just using it to set an SPN.

If you are just trying to set an SPN, you could do that with a direct LDAP insert or use setspn which is written to do just that.


--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



strongline wrote:
what matters is the -princ parameter like below
ktpass -princ fakedService/fakedHost.domain.com -mapuser AuserName
.....blah blah

then "fakedService/fakedHost.domain.com" will be registered as SPN as
well as UPN of "AuserName".

.

Relevant Pages

  • RE: Source: KDC Event ID: 11. Symbolic Name: KDCEVENT_NAME_NOT_UNI
    ... The command has completed successfully ... Let's manually find and correct duplicate SPNs ... Note the machine accounts under which the SPN is located. ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot delegate credentials to a ktpass-created account?
    ... DELEGATE flag on, while the one for host/h.l.d has it. ... I further find out that when I'm calling the ISC function upon the SPN ... I created with ktpass, the token generated is 0x455 bytes long. ...
    (microsoft.public.platformsdk.security)
  • ktpass changed my UPN
    ... after I ran ktpass to map an SPN to a service account, ... service account has been changed to the same as SPN. ... I don't understand why UPN has to be changed by running ktpass. ...
    (microsoft.public.windows.server.active_directory)