SetSpn Topics | Previous

Troubleshooting SetSpn


Service Principal Names (SPN) can be constructed only by using the account base name as the second part. The directory service enforces this, by generating a constraint violation error. You may not have the rights to access or modify this property on some account objects. You can determine what your access rights are by viewing the security attributes on the account object using the Directory Management (Active Directory Users and Computers) Microsoft Management Console (MMC) snap-in, a Windows 2000 administrative tool.

Reporting Bugs

When reporting bugs or making requests (such as feature requests), include the following information:

Built-in SPNs

The built-in SPNs that are always recognized for computer accounts are:

alerter
appmgmt
browser
cifs
cisvc
clipsrv
dcom
dhcp
dmserver
dns
dnscache
eventlog
eventsystem
fax
http
ias
iisadmin
messenger
msiserver
mcsvc
netdde
netddedsm
netlogon
netman
nmagent
oakley
plugplay
policyagent
protectedstorage
rasman
remoteaccess
replicator
rpc
rpclocator
rpcss
rsvp
samss
scardsvr
scesrv
schedule
scm
seclogon
snmp
spooler
tapisrv
time
trksvr
trkwks
ups
w3svc
wins
www