Admin Know-IT-All Question #18

Admin Know-IT-All Question #18




KIA Links
Back to KIA admin challenge, the sequel.

Did you see the recent Featured Topic: The Know-IT-All quiz round-up?

>> Check it out here!
>> Send Mr. Know-IT-All a question suggestion!

Were you correct?

"Follow. But! Follow only if ye be men of valour, for the entrance to this cave is guarded by a creature so foul, so cruel that no man yet has fought with it and lived! Bones of full fifty men lie strewn about its lair. So, brave knights, if you do doubt your courage or your strength, come no further, for death awaits you all with nasty, big, pointy teeth."

- Tim the Enchanter, Monty Python and the Holy Grail

Today's Know-IT-All answer is:
d. A duplicate SPN (ServicePrincipalName) value in the AD tree

Learn more:

At times, a domain user will try to connect to a Windows 2000 server that is a member of the same domain, only to be asked for their credentials (user ID / password) before they can access the server.

When this happens, an error may be generated in the event log which reads:

Event Type:Error
Event Source:KDC
Event Category:None
Event ID:11
Description: There are multiple accounts with name host/SERVERNAME.microsoft.com of type 10

If this happens, it's due to a duplicate SPN (ServicePrincipalName) value in the Active Directory tree. SPNs are used for things other than direct user validation; for instance, a service that runs under a user account will have an SPN attribute for that account.

If this quiz has left you yearning for more information, please check the links below for related articles and tips:

>> Read Serdar Yegulalp's full article entitled: Deal with duped SPNs.

>> Read this Administrator forum thread entitled: VPN site-to-site issues.

Do you have an idea for an admin Know-IT-All question? Let Mr. Know-IT-All know!

Dig deeper on IT Career Development and Training

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close