Set SPN To SQL With NT AUthority

Question

I am trying to add SPN entries for my SQL server but SQL server is running under an NT Authority account like SYSTEM or LOCAL SERVICE.

When I put in the setspn code it says it can't find the user. Is this possible to do? Trying to run the following:

setspn -L MSSQLSvc/SQLSERVER1 "NT AUTHORITY\LOCAL SERVICE"

Ace · Accepted Answer · 2023-09-27 20:00:54Z

3

The NT authority accounts are local computer accounts, and setspn is for domain account. So you need to the spn for the computer account:

setspn -S MSSQLSvc/myserver.mydomain.local:1433 myserver.mydomain.local

answered Sep 27 at 20:00

Ace

6932 silver badges10 bronze badges

Tried that but it comes back with "Unable to locate the account SQLSERVER1"
– JukEboX
Sep 27 at 20:54
Is your sql server joined to an active directory domain?
– Ace
Sep 28 at 0:50

Add a comment |

JukEboX · Accepted Answer · 2023-10-12 15:03:01Z

1

Thanks for the help from ACE but the parameters were a bit wrong. For a local service account on a server use the following:

setspn -S MSSQLSvc/server.domain.network:1433 domain\ServerName$

answered Oct 12 at 15:03

JukEboX

8354 gold badges18 silver badges48 bronze badges

Add a comment |

2 Answers 2