Event Id 11 The Kdc Encountered Duplicate Names
Tuesday, August 07, 2012 2:17 PM Reply | Quote 0 Sign in to vote Hi, As it looks like a duplicate SPN's issue with regards to SQL server, check the following Everything I have found searching talks of two domain machines but not the situation of machine+serviceaccount. Type LDP and click OK. 3. The KB posted above describes howto find the duplicates. Source
If I am on the right track, I think I need to delete those two entries with the SID then replace them with a new current lower privelaged domain user account, An approach you can take would be to run LDP.exe (a utility available from the Windows 2000 resource kit). As per Microsoft: "There are two or more computer accounts that have the same service principal names (SPNs) registered".See ME321044 for more details. Set the filter as the following: (serviceprincipalname=HOST/BOT-PC0295.home.com ) 12. https://social.technet.microsoft.com/Forums/windowsserver/en-US/8df35316-23ba-48ba-aa3e-2249fcbfecbc/event-id-11-there-are-multiple-accounts-with-name-mssqlsvcxxxxxx?forum=winserverDS
Event Id 11 The Kdc Encountered Duplicate Names
The domain service account has SPNs for each of the SQL boxes like so:MSSQLSvc/server1.domain.com:1433MSSQLSvc/server2.domain.com:1433MSSQLSvc/server3.domain.com:1433Do I:a] do nothingb] delete the SPN from each of the server objectsc] delete the SPNs from the When replacing or removing machines, try to have them cleanly leave the domain. If you don't use kerberos, no big deal. Setspn Command All rights reserved.
But then we needed to enable kerberos authentication for our BizTalk 2004 server's SQL server and we ran into an interesting question. Event Id 11 Kerberos-key-distribution-center Duplicate Names Bet you a dollar that you've done one or more of the following: pushed for standardized server names, spent hours writing SQL Server maintenance related TSQL scripts that are SQL Server Which looks like this: >> Dn: CN=Servername, OU=Domain Controllers, ... ... >> Dn: CN=Administrator, OU=Users, ... ... 5. http://www.sqlservercentral.com/Forums/Topic907146-359-1.aspx Event ID 11 How to Configure an SPN for SQL Server Site Database Servers Hope this helps..
Open the properties page of this DN and choose serverPrincipalName from the second listbox. Service Principal Name So if I am reading the above text correctly if I create another domain account to run the service on the 2nd sql server this error may go away or will I followed the procedure at http://support.microsoft.com/kb/321044%C2%A0; and did find two entries for that Service Principal name.Â One is a User (a domain admin) and the other is one is a computer Join Now For immediate help use Live now!
Event Id 11 Kerberos-key-distribution-center Duplicate Names
CN=Administrator, OU=Users, ...). https://www.experts-exchange.com/questions/25913321/KDC-EVENT-ID-11-There-are-multiple-accounts-with-name-MSSQLSvc-DELL700-domain-com-1433.html You can also use dsquery command (part of adminpak.msi) C:\>dsquery * -filter "(serviceprincipalname=MSSQLSvc/DELL700.
Joe Even after attempting to delete and spnset -D it still shows up? this contact form Thanks!And as to the OCD statement, it was said in a tone of complete respect. Any suggestions would be greatly appreciated. Event ID 11 â Service Principal Name Configuration http://social.technet.microsoft.com/Forums/pl/winserverDS/thread/de033075-c1b0-43fc-9607-af5d130f8301 Hope this helpsBest Regards, Sandesh Dubey. Event Id 11 Disk
Microsoft Customer Support Microsoft Community Forums Windows Server TechCenter Â Sign in United States (English) Brasil (PortuguÃªs)ÄeskÃ¡Â republika (ÄeÅ¡tina)Deutschland (Deutsch)EspaÃ±a (EspaÃ±ol)France (FranÃ§ais)Indonesia (Bahasa)Italia (Italiano)RomÃ¢nia (RomÃ¢nÄ)TÃ¼rkiye (TÃ¼rkÃ§e)Ð Ð¾ÑÑÐ¸Ñ (Ð ÑÑÑÐºÐ¸Ð¹)××©×¨×× (×¢××¨××ª)Ø§ÙÙ Ù ÙÙØ© Ø§ÙØ¹Ø±Ø¨ÙØ© Ø§ÙØ³Ø¹ÙØ¯ÙØ© (Ø§ÙØ¹Ø±Ø¨ÙØ©)à¹à¸à¸¢ (à¹à¸à¸¢)ëíë¯¼êµ Krb_ap_err_modified SPNMSSQLSvc/OM_SQLSRV.uk.corp.company.net:1433 appears in dn: CN=SQL Admin,OU=DB Administrators,OU=DB Management,DC=uk,DC=corp,DC=company,DC=net dn: CN=OM_SQLSRV,OU=SQL Servers,OU=DB Management,DC=uk,DC=corp,DC=company,DC=net Questions. 1. During the replacement, the old server was renamed and physically removed, but was not removed from AD and DNS.
The idea is to search for the duplicate and remove it.
Thanks again! 0 Question has a verified solution. This fixed the problem in my case. Tuesday, August 07, 2012 11:53 AM Reply | Quote Moderator 0 Sign in to vote Hi Paul Yes we do use the same domain user account to run the SQLSERVERAGENT andMSSQLSERVER Set Scope to Subtree. 13.
The name in the Network ID Tab was back to normal. In either case, this indicates that you have a duplicate machine nameregistered within the Active Directory on your domain. I am having the same issue, it showed up in my backup exec out of the blue. http://gbnetvideo.net/event-id/the-dns-server-encountered-a-bad-packet-from-event-5501.html So i had a read of this blog http://blog.joeware.net/2008/07/17/1407/ and ran his adfind tool which gives the below results.
This posting is provided "AS IS" with no warranties, and confers no rights. Of course, to see the SPN's you'll have to edit the attributes of the account in some LDAP editing tool, like ADSIEDIT, but they'll be there. You cannot post new polls. They are:1) Use Windows 2003 ADU&C, create a query, custom LDAP, and enter the following:servicePrincipalName=MSSQLSvc/host.domain.com:1433It will return all objects with that SPN.2) Use a tool like adfind.exe with the following query:Adfind.exe
There are multiple accounts with name MSSQLSvc/dk_sqlsrv.uk.corp.company.net:1433 of type DS_SERVICE_PRINCIPAL_NAME. Also I would suggest you go back and do a clean up of the SPN's that have been created for this shared service account. Well, for not only posting the details of your your problem but following through with the answer after no one responded. x 72 Anonymous I was seeing this error in my lab machines for multiple spns in the format cifs\
Join our community for more solutions or to ask questions. From this, ADSIEDIT on the rogue entry to edit the servicePrincipalName attribute. The error came up once every hour. Comments: Anonymous SETSPN -X (Windows 2008 / Windows 7) will return duplicate SPNs.
If you have a name collision (joining a new machine to the domain that has the same name of some now-missing machine), remember to both clean up the computer object and Use ASIEDIT in order to delete the offending systems.This is the detailed procedure:In order to enable the service to authenticate properly, you need to make sure that the service has only I followed Ander Taylor's post and on a hunch, I checked the old service account and the current computer account. I never knew that pinging a GUID was possible! :)Joe Wednesday, December 26, 2012 3:49 PM Reply | Quote 0 Sign in to vote Not sure.
x 73 EventID.Net See ME911353 for a situation in which this event occurs.