Skip to content

5000+ Great Articles

Best Articles & Essays: Interesting Articles to Read Online

  • Prevent a Mouse or USB Device from Waking Windows from Sleep Mode Computer Tips
  • How to Fix Can’t sign up for ChatGPT? AI Tools & Guides
  • Best battery calculator 2020

    Best battery calculator 2020. 1 - Sharp HO EL240SB 8 Digit Solar and Battery Powered Slant Display Calculator, White, 2 3/4 x 4 1/2 (EL240SAB)

  • Best stats calculator 2020

    Best stats calculator 2020. 1 - Rite in the Rain Weatherproof Top Spiral Notepad, Yellow Cover, Universal Pattern, 3 Pack (No. 146-3), 6 x 4 x 0.375

  • 14 Best Options for Video Game Rentals in 2022 Gaming
  • 6 eBay Buyer and Seller Scams to Spot and Avoid Computer Tips
  • 11 Best Craigslist Alternatives To Sell Your Stuff

    11 Best Craigslist Alternatives To Sell Your Stuff. Many of us have too many things or things that we no longer need. So what do we do about it? Se

  • How to Digitize DVDs 2021 How-To

Explanation of Service Principal Names in Active Directory

Posted on October 14, 2020 By blog_786 No Comments on Explanation of Service Principal Names in Active Directory

Explanation of Service Principal Names in Active Directory.

In this article, we’ll talk about identity management in Windows Server 2016. Specifically, we’ll talk about SPNs (Service Principal Names) and how beautiful they are.

First of all, SPN is similar to an alias for an AD object, which can be a service account, user account, or computer object that allows other AD resources to know which services are running under which accounts and creates links between them in Active Directory.

There are several ways to check which SPNs are assigned to an object. One is through Active Directory Users and Computers and the other is through the command line.

View SPNs in Active Directory

To be able to see SPNs by Active Directory users and computers, you need to enable additional functionality in the console by going to the View menu. Once enabled, navigate to the desired AD object, select Properties and go to the Attribute Editor tab:

Explanation of Service Principal Names in Active Directory

Then find the servicePrincipalName attribute and click Edit. Here you will see a list of all SPNs, as well as the option to add SPNs.

Explanation of Service Principal Names in Active Directory

Another way is to use setspn –l on the command line to view the SPNs for that particular object.

Explanation of Service Principal Names in Active Directory

We can also add other SPNs to this object, depending on which object is hosting, which type of service, and so on.

Create an SPN in Active Directory

Let’s say we have a new service and we want to add an SPN so that other AD resources can find out which server hosts this service and which user it is authenticating with.

First, let’s create a service account in Active Directory.

New-ADServiceAccount -Name MSA-syslab-1 -RestrictToSingleComputer

Explanation of Service Principal Names in Active Directory

We will now link the managed service account to our server.

Add-ADComputerServiceAccount -Identity rmc-syslab-1 -ServiceAccount MSA-syslab-1

Explanation of Service Principal Names in Active Directory

Then let’s set up this service account on the server.

Install-ADServiceAccount MSA-syslab-1

Explanation of Service Principal Names in Active Directory

Finally, let’s create our shared service.

New-Service -Name GENSERV -BinaryPathName C: Windows System32 notepad.exe

Explanation of Service Principal Names in Active Directory

We now use the setspn –s command, which creates an SPN and uses the –s switch to make sure there is no duplicate SPN.

setspn -s GENSERV / rmc-syslab-1.rmcsyslab.com rmcsyslab MSA- syslab-1

Explanation of Service Principal Names in Active Directory

The command adds a GENSERV service hosted on rmc-syslab-1, running under the MSA user MSA-syslab-1. Now it remains to configure the service to work under an MSA account.

Explanation of Service Principal Names in Active Directory

As you can see in the Logon tab in the service properties, I configured an MSA account and left the password field blank as we know MSA passwords are managed by Windows.

Now let’s check the service account and see which SPN was added to it.

Explanation of Service Principal Names in Active Directory

As you can see, it has the SPN GENSERV / rmc-syslab-1.rmcsyslab.com, since this user logs in and authenticates this service.

Explanation of Service Principal Names in Active Directory

Well, that’s about SPN for now. Remember that SPNs are very sensitive. You should only go deeper into this if there is a problem or if you are creating some kind of special service.

Thanks for your time, I hope you found this article interesting. Enjoy!

Explanation of Service Principal Names in Active Directory

Share this:

  • Twitter
  • Facebook
Active Directory Tags:Create an SPN in Active Directory, Explanation of Service Principal Names in Active Directory, View SPNs in Active Directory

Post navigation

Previous Post: Configure Fine-Grained Password Policies for Specific Users in Active Directory
Next Post: Advanced Windows System Cleanup Commands – SFC and DISM

Related Posts

  • Active Directory DSRM and Defragmentation Active Directory
  • Configure Fine-Grained Password Policies for Specific Users in Active Directory Active Directory
  • Fix Active Directory 1818 Error during DCPromo Active Directory
  • vat calculator germany Active Directory
  • Active Directory Certificate Services Installation Active Directory

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Archives

  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • November 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • March 2021
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • December 2019
  • July 2019
  • May 2019
  • April 2019
  • January 2019
  • December 2018
  • November 2018
  • October 2018
  • September 2018
  • August 2018

Categories

  • AI Tools & Guides
  • Amazon Web Services
  • Apple Watch
  • Computer Tips
  • Cool Websites
  • Featured Posts
  • Free Software Downloads
  • Gadgets
  • Gaming
  • General Software
  • Google Software/Tips
  • Hardware
  • Help Desk
  • How-To
  • iOS
  • iPad
  • iPhone
  • islamic Books
  • Linux
  • Linux Tips
  • Mac OS X
  • macOS
  • MS Office Tips
  • Networking
  • Office Tips
  • OS X
  • Product Reviews
  • Reviews
  • Safari
  • Smart Home
  • Smartphones
  • Software Reviews
  • technology
  • text
  • Tools Review
  • Troubleshooting
  • Tutorials
  • Uncategorized
  • Urdu Books PDF
  • Web Site Tips
  • Windows
  • Windows 10
  • Windows 7
  • Windows XP Tips
  • Wordpress
  • 10 Things to Check Before Publishing a YouTube Video
  • A Simple Trick to Get 50% Discount on Audible for Three Months
  • How to reset your SIM card
  • This Simple Trick Lets You Play YouTube in the Background on iOS
  • How to go Back to the old YouTube Layout (2013)
DMCA.com Protection Status

Recent Posts

  • How to Get 2 Free Audiobooks From Audible Trial Instead of 1
  • 10 Things to Check Before Publishing a YouTube Video
  • MailTag: Real-time Email Tracking, Made Easy
  • Pokemon Sleep: what is it and how to play
  • How to Respond to Messages on Instagram (Mobile and PC)

Recent Comments

  1. This Simple Trick Lets You Play YouTube in the Background on iOS on YouTube Not Working? Here Are Quick Fixes To Try
  2. How to Bypass Chromecast DNS and Circumvent Geo Blocking on 5 Cool Websites to Find Good Movies and TV Shows on Netflix
  3. 5 Cool Websites to Find Good Movies and TV Shows on Netflix on check netflix video quality internet explorer
  4. SmartDNS vs VPN “What’s the Difference?” on How to Watch Apple TV on Roku
  5. How to go Back to the old YouTube Layout (2013) on 10 Things to Check Before Publishing a YouTube Video
  • 21 tips and tricks to better organize your Notes app General Software
  • How to delete a user in Windows 10,2023 Windows 10
  • 6 Best Luxury Online Shopping Sites 2022 Cool Websites
  • Overview of Azure Virtual Machine Availability Sets Microsoft Azure
  • Best eBook Reader Software for Mobile, Laptop or PC Software Reviews
  • Top 10 Best Mobile Games of 2023 Smartphones
  • The difference between sleep and hibernation on Windows 10 Windows 10
  • How to See Someone’s Location on an iPhone iPhone

Copyright © 2023 How To Blog.

Powered by PressBook News WordPress theme

Go to mobile version