Ronald de Kock » SQL Server http://www.rdekock.nl Fri, 05 Aug 2011 10:03:30 +0000 en hourly 1 http://wordpress.org/?v=3.1.2 ServicePrincipalName (SPN) and SQL 2008 Failover Cluster http://www.rdekock.nl/serviceprincipalname-spn-and-sql-2008-failover-cluster/ http://www.rdekock.nl/serviceprincipalname-spn-and-sql-2008-failover-cluster/#comments Wed, 03 Mar 2010 19:32:08 +0000 Ronald de Kock http://www.rdekock.nl/?p=98 When installing a SQL 2008 Server Failover Cluster it is necessary to create SPN’s for the SQL Server Service Account. One way to accomplish this is to tweak the Service User Account used for running the SQL Server. The permissions of the Service Account can to be adjusted to allow it to create and remove SPN’s.

Use ADSI Edit (included in Server 2008) and connect to the Default Naming Context.
Locate the Service Account, open the security tab.
Select SELF in the group or user names windows and check the Allow box for  ”Write public information” .

SELF permissions

SELF permissions

After making the change restart the SQL Server service. The Service Account will register the SPN automatically.

To check if the SPN’s are registered correctly open a command prompt and do:
setspn -L Serviceaccount (e.g. SA_SQL2008_01)

The output should look like:
Registered ServicePrincipal Names for CN=SA_SQL2008_01, OU=Service Accounts, DC=Contoso, DC=com

MSSQLSvc/FQDN:1433

Works like a charm.

]]> http://www.rdekock.nl/serviceprincipalname-spn-and-sql-2008-failover-cluster/feed/ 1