Article

Admin Know-IT-All Question #18

Mr. Know-IT-All



KIA Links
Back to KIA admin challenge, the sequel.

Did you see the recent Featured Topic: The Know-IT-All quiz round-up?

>> Check it out here!
>> Send Mr. Know-IT-All a question suggestion!

Were you correct?

"Follow. But! Follow only if ye be men of valour, for the entrance to this cave is guarded by a creature so foul, so cruel that no man yet has fought with it and lived! Bones of full fifty men lie strewn about its lair. So, brave knights, if you do doubt your courage or your strength, come no further, for death awaits you all with nasty, big, pointy teeth."

- Tim the Enchanter, Monty Python and the Holy Grail

Today's Know-IT-All answer is:
d. A duplicate SPN (ServicePrincipalName) value in the AD tree

Learn more:

At times, a domain user will try to connect to a Windows 2000 server that is a member of the same domain, only to be asked for their credentials (user ID / password) before they can access the server.

When this happens, an error may be generated in the event log which reads:

Event Type:Error
Event Source:KDC
Event Category:None
Event ID:11
Description: There are multiple accounts with name host/SERVERNAME.microsoft.com of type 10

If this happens, it's due to a duplicate SPN (ServicePrincipalName) value in the Active Directory tree. SPNs are used for things other than direct user validation; for instance, a service that runs under a user account will have an SPN attribute for that account.

If this quiz has left you yearning for more information, please check the links below for related articles and tips:

>> Read Serdar Yegulalp's full article entitled: Deal with duped SPNs.

>> Read this Administrator forum thread entitled: VPN site-to-site issues.

Do you have an idea for an admin Know-IT-All question? Let Mr. Know-IT-All know!

Related Topics: WinIT Resources, VIEW ALL TOPICS

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top