Contents
Where do you run setspn?
It is available if you have the Active Directory Domain Services (AD DS) server role installed. To use setspn, you must run the setspn command from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.
How do I add a setspn to my service account?
The steps to follow to configure an SPN account for an application server are:
- Assign the SPN to the Active Directory account using the setspn command.
- Repeat this command for any number of SPN to the same account.
- Generate a keytab file for the user account.
What are SPNs?
A service principal name (SPN) is a unique identifier of a service instance. SPNs are used by Kerberos authentication to associate a service instance with a service logon account. A given service instance can have multiple SPNs if there are multiple names that clients might use for authentication.
Where do I run the setspn command?
I have a site running on IIS Server which is running on windows 2008 server connected to Domain Controller machine. Do I have to run the setspn command on the IIS server or on the Domain Controller? You can run it on either machine as long as the login is privileged.
Can you use setspn on Windows Server 2008?
First things first: SetSPN is a built in utility with Windows Server 2008 and Server 2008 R2. You don’t have to download SetSPN to use it. It’s already part of your operating system on both workstations and servers. Note: While SetSPN can be run from either a workstation or a server, don’t run it from domain controllers.
What does setspn do to Active Directory account?
Reads, modifies, and deletes the Service Principal Names (SPN) directory property for an Active Directory service account. You use SPNs to locate a target principal name for running a service. You can use setspn to view the current SPNs, reset the account’s default SPNs, and add or delete supplemental SPNs.
How to use SPNS when you configure web applications that?
This step-by-step article describes how to use service principal names (SPNs) when you configure Web applications that are hosted on IIS.IIS passes the Negotiate security header when Windows Integrated authentication is used to authenticate client requests.