When I run
setspn.exe -X on my SQL Server box I get a bunch of entries but all are similar and resemble this -->
MSSQLSvc/username.ourdomain.org:1293 is registered on these accounts:
This is concerning as they all have me as the second
CN which I don't understand. All except for one that is. This one is my biggest concern -->
MSSQLSvc/OURSQLBOX.ourdomain.org:1433 is registered on these accounts: CN=OURSQLBOX,OU=Servers,DC=ourdomain,DC=org CN=Services,CN=Users,DC=ourdomain,DC=org
That one is our Production SQL Box. Now I checked the MSSQLSERVER service's Log On As and it's set to the Services account. What I am wondering are the following:
- How concerned should I be that these have happened, particularly the SQL Box one
- How does this tend to happen in the first place
- How do I safely remove the unused one(I see the section in my link below but I am hoping for more info)
I was led down this path by having the following Error in my Domain Controllers Event Log --> Event ID 11 (http://technet.microsoft.com/en-us/library/39b7428a-2b45-4640-9bd7-46833007d38d.aspx)
Something else that confuses me about this is that when I do a
setspn -L OURSQLBOX it returns
Registered ServicePrincipalNames for CN=OURSQLBOX,OU=Servers,DC=ourdomain,DC=org: MSSQLSvc/OURSQLBOX.ourdomain.org MSSQLSvc/OURSQLBOX.ourdomain.org:1433 WSMAN/OURSQLBOX WSMAN/OURSQLBOX.ourdomain.org TERMSRV/OURSQLBOX TERMSRV/OURSQLBOX.ourdomain.org HOST/OURSQLBOX HOST/OURSQLBOX.ourdomain.org
What in that list is the duplicate?
Thanks for any and all information.