Skip to content

5000+ Great Articles

Best Articles & Essays: Interesting Articles to Read Online

  • The Best Free Apps for a New iPhone Smartphones
  • How to Import Fonts Into Procreate Computer Tips
  • Fix Google Maps not talking or giving directions Google Software/Tips
  • Show the Classic Navigation Tree in Windows 7 Explorer Windows 7
  • How to Download Instagram Reels on all Platforms How-To
  • Do I need 2FA if I use a password manager? macOS
  • How to See Who Has Unfollowed You on Twitter Cool Websites
  • How To Check Your Apple Pencil Battery Hardware

Explanation of Service Principal Names in Active Directory

Posted on October 14, 2020 By blog_786 No Comments on Explanation of Service Principal Names in Active Directory

Explanation of Service Principal Names in Active Directory.

In this article, we’ll talk about identity management in Windows Server 2016. Specifically, we’ll talk about SPNs (Service Principal Names) and how beautiful they are.

First of all, SPN is similar to an alias for an AD object, which can be a service account, user account, or computer object that allows other AD resources to know which services are running under which accounts and creates links between them in Active Directory.

There are several ways to check which SPNs are assigned to an object. One is through Active Directory Users and Computers and the other is through the command line.

View SPNs in Active Directory

To be able to see SPNs by Active Directory users and computers, you need to enable additional functionality in the console by going to the View menu. Once enabled, navigate to the desired AD object, select Properties and go to the Attribute Editor tab:

Explanation of Service Principal Names in Active Directory

Then find the servicePrincipalName attribute and click Edit. Here you will see a list of all SPNs, as well as the option to add SPNs.

Explanation of Service Principal Names in Active Directory

Another way is to use setspn –l on the command line to view the SPNs for that particular object.

Explanation of Service Principal Names in Active Directory

We can also add other SPNs to this object, depending on which object is hosting, which type of service, and so on.

Create an SPN in Active Directory

Let’s say we have a new service and we want to add an SPN so that other AD resources can find out which server hosts this service and which user it is authenticating with.

First, let’s create a service account in Active Directory.

New-ADServiceAccount -Name MSA-syslab-1 -RestrictToSingleComputer

Explanation of Service Principal Names in Active Directory

We will now link the managed service account to our server.

Add-ADComputerServiceAccount -Identity rmc-syslab-1 -ServiceAccount MSA-syslab-1

Explanation of Service Principal Names in Active Directory

Then let’s set up this service account on the server.

Install-ADServiceAccount MSA-syslab-1

Explanation of Service Principal Names in Active Directory

Finally, let’s create our shared service.

New-Service -Name GENSERV -BinaryPathName C: Windows System32 notepad.exe

Explanation of Service Principal Names in Active Directory

We now use the setspn –s command, which creates an SPN and uses the –s switch to make sure there is no duplicate SPN.

setspn -s GENSERV / rmc-syslab-1.rmcsyslab.com rmcsyslab MSA- syslab-1

Explanation of Service Principal Names in Active Directory

The command adds a GENSERV service hosted on rmc-syslab-1, running under the MSA user MSA-syslab-1. Now it remains to configure the service to work under an MSA account.

Explanation of Service Principal Names in Active Directory

As you can see in the Logon tab in the service properties, I configured an MSA account and left the password field blank as we know MSA passwords are managed by Windows.

Now let’s check the service account and see which SPN was added to it.

Explanation of Service Principal Names in Active Directory

As you can see, it has the SPN GENSERV / rmc-syslab-1.rmcsyslab.com, since this user logs in and authenticates this service.

Explanation of Service Principal Names in Active Directory

Well, that’s about SPN for now. Remember that SPNs are very sensitive. You should only go deeper into this if there is a problem or if you are creating some kind of special service.

Thanks for your time, I hope you found this article interesting. Enjoy!

Explanation of Service Principal Names in Active Directory

Share this:

  • Twitter
  • Facebook
Active Directory Tags:Create an SPN in Active Directory, Explanation of Service Principal Names in Active Directory, View SPNs in Active Directory

Post navigation

Previous Post: Configure Fine-Grained Password Policies for Specific Users in Active Directory
Next Post: Advanced Windows System Cleanup Commands – SFC and DISM

Related Posts

  • Active Directory Certificate Services Installation Active Directory
  • Configure Fine-Grained Password Policies for Specific Users in Active Directory Active Directory
  • vat calculator germany Active Directory
  • Active Directory DSRM and Defragmentation Active Directory
  • Fix Active Directory 1818 Error during DCPromo Active Directory

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Archives

  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • November 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • March 2021
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • December 2019
  • July 2019
  • May 2019
  • April 2019
  • January 2019
  • December 2018
  • November 2018
  • October 2018
  • September 2018
  • August 2018

Categories

  • AI Tools & Guides
  • Amazon Web Services
  • Apple Watch
  • Computer Tips
  • Cool Websites
  • Featured Posts
  • Free Software Downloads
  • Gadgets
  • Gaming
  • General Software
  • Google Software/Tips
  • Hardware
  • Help Desk
  • How-To
  • iOS
  • iPad
  • iPhone
  • islamic Books
  • Linux
  • Linux Tips
  • Mac OS X
  • macOS
  • MS Office Tips
  • Networking
  • Office Tips
  • OS X
  • Product Reviews
  • Reviews
  • Safari
  • Smart Home
  • Smartphones
  • Software Reviews
  • technology
  • text
  • Tools Review
  • Troubleshooting
  • Tutorials
  • Uncategorized
  • Urdu Books PDF
  • Web Site Tips
  • Windows
  • Windows 10
  • Windows 7
  • Windows XP Tips
  • Wordpress
  • A Simple Trick to Get 50% Discount on Audible for Three Months
  • How to reset your SIM card
  • This Simple Trick Lets You Play YouTube in the Background on iOS
  • How to go Back to the old YouTube Layout (2013)
  • How to Bypass Chromecast DNS and Circumvent Geo Blocking
DMCA.com Protection Status

Recent Posts

  • 10 Things to Check Before Publishing a YouTube Video
  • MailTag: Real-time Email Tracking, Made Easy
  • Pokemon Sleep: what is it and how to play
  • How to Respond to Messages on Instagram (Mobile and PC)
  • How to reset your SIM card

Recent Comments

  1. This Simple Trick Lets You Play YouTube in the Background on iOS on YouTube Not Working? Here Are Quick Fixes To Try
  2. How to Bypass Chromecast DNS and Circumvent Geo Blocking on 5 Cool Websites to Find Good Movies and TV Shows on Netflix
  3. 5 Cool Websites to Find Good Movies and TV Shows on Netflix on check netflix video quality internet explorer
  4. SmartDNS vs VPN “What’s the Difference?” on How to Watch Apple TV on Roku
  5. How to go Back to the old YouTube Layout (2013) on 10 Things to Check Before Publishing a YouTube Video
  • How to Turn Off Amber Alerts On iPhone iPhone
  • 4 Early Access Games in 2020 for Android Worth Checking Out Smartphones
  • Best ti baii plus calculator 2020

    Best ti baii plus calculator 2020. 1 - The Best TI BA II Plus Business Calculator Top Reviews .... . 2 - Navitech Red Graphics Calculator Ha

  • Facebook Tips: Automatically backup your FB images to dropbox How-To
  • DownThemAll Alternatives: 5 Best Download Managers for Chrome and Firefox How-To
  • Prevent Apple AirTag Stalking or Spying Tutorials
  • how to transfer a call from iphone to mac iPhone
  • how to crop a screenshot on Mac Tutorials

Copyright © 2023 How To Blog.

Powered by PressBook News WordPress theme

Go to mobile version