When I run setspn.exe -X on my SQL Server box I get a bunch of entries but all are similar and resemble this --> MSSQLSvc/username.ourdomain.org:1293 is registered on these accounts:
CN=USERNAME,OU=Computers,OU=OurOU,DC=OurDomain,DC=org
CN=My Name,OU=OurOU,DC=OurDomain,DC=org
This is concerning as they all have me as the second CN which I don't understand. All except for one that is. This one is my biggest concern -->
MSSQLSvc/OURSQLBOX.ourdomain.org:1433 is registered on these accounts:
CN=OURSQLBOX,OU=Servers,DC=ourdomain,DC=org
CN=Services,CN=Users,DC=ourdomain,DC=org
That one is our Production SQL Box. Now I checked the MSSQLSERVER service's Log On As and it's set to the Services account. What I am wondering are the following:
- How concerned should I be that these have happened, particularly the SQL Box one
- How does this tend to happen in the first place
- How do I safely remove the unused one(I see the section in my link below but I am hoping for more info)
I was led down this path by having the following Error in my Domain Controllers Event Log --> Event ID 11 (http://technet.microsoft.com/en-us/library/39b7428a-2b45-4640-9bd7-46833007d38d.aspx)
Something else that confuses me about this is that when I do a setspn -L OURSQLBOX it returns
this-->
Registered ServicePrincipalNames for CN=OURSQLBOX,OU=Servers,DC=ourdomain,DC=org:
MSSQLSvc/OURSQLBOX.ourdomain.org
MSSQLSvc/OURSQLBOX.ourdomain.org:1433
WSMAN/OURSQLBOX
WSMAN/OURSQLBOX.ourdomain.org
TERMSRV/OURSQLBOX
TERMSRV/OURSQLBOX.ourdomain.org
HOST/OURSQLBOX
HOST/OURSQLBOX.ourdomain.org
What in that list is the duplicate?
Thanks for any and all information.
