Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to configure Kerberos for my SQL Server (the database engine domain account). I have executed the following command:

SETSPN -A MSSQLSvc/MyDBServer:1433 MyDomain\SQLServerService

Replacing MyDBServer with the FQDN of the server and replacing MyDomain\SQLServerService with the name of my account.

I then ran the query:

SELECT s.session_id , c.connect_time , s.login_time , s.login_name , c.protocol_type , c.auth_scheme , s.HOST_NAME , s.program_name FROM sys.dm_exec_sessions s JOIN sys.dm_exec_connections c ON s.session_id = c.session_id

This returns NTLM. So it's not Kerberos. What am I mising? The delegation tab is available for the account, so the spn bit worked perfectly fine. Is it not required to set some settings in the delegation tab? I've seen this in the case of setting kerberos for Sharepoint 2010 (which I intend to setup).


share|improve this question

I have found I need to register SPNs for different syntax for describing sql server. For some reason sql uses different syntaxes along the way to authenticating. Register each of these formats.

share|improve this answer

Did you test with a connection on localhost?

There seems to be a fallback (probably for performance reasons as you do not need Kerberos on the local machine) to NTLM in some localhost cases, even if you have an SPN.

Have a look at:

share|improve this answer
I tested by logging into the server and going to sql server, so I guess that is "a connection on localhost"? I saw a demo and the lecturer went on the local server anyway. Something surely is a miss? – dotnetdev Nov 18 '11 at 15:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.