know nothing about MsSQL

Hello,
I use Access as my database. Can someone direct me to a good source to
determine if I need to upgrade to MsSQL and costs involved?
Thanks,
Dave
If you know nothing about MSSQL then what makes you think you might want to
upgrade? Is there something Access isn't doing for you?
David Portas
SQL Server MVP

know nothing about MsSQL

Hello,
I use Access as my database. Can someone direct me to a good source to
determine if I need to upgrade to MsSQL and costs involved?
Thanks,
DaveI searched around a bit and can't find much on this topic. This article
appears to have some rough guidelines:
http://builder.com.com/5100-6388_14-5035130-1.html
I'm cross-posting this reply into microsoft.public.access in hopes that
you'll get some better info there.
--
Adam Machanic
SQL Server MVP
http://www.sqljunkies.com/weblog/amachanic
--
"Dave" <Dave@.discussions.microsoft.com> wrote in message
news:6146AFDF-A9D3-433F-A4FB-A43A53D2A50B@.microsoft.com...
> Hello,
> I use Access as my database. Can someone direct me to a good source to
> determine if I need to upgrade to MsSQL and costs involved?
> Thanks,
> Dave|||Don't know for certain, but there's probably something in Mary Chipman and
Andy Baron's "Microsoft Access Developer's Guide to SQL Server"
http://www.amazon.com/exec/obidos/ASIN/0672319446/ref=ase_mcwtechnologies/104-2234668-9725519
--
Doug Steele, Microsoft Access MVP
http://I.Am/DougSteele
(no e-mails, please!)
"Adam Machanic" <amachanic@.hotmail._removetoemail_.com> wrote in message
news:OuWdnaF5EHA.2180@.TK2MSFTNGP12.phx.gbl...
> I searched around a bit and can't find much on this topic. This article
> appears to have some rough guidelines:
> http://builder.com.com/5100-6388_14-5035130-1.html
> I'm cross-posting this reply into microsoft.public.access in hopes that
> you'll get some better info there.
> --
> Adam Machanic
> SQL Server MVP
> http://www.sqljunkies.com/weblog/amachanic
> --
>
> "Dave" <Dave@.discussions.microsoft.com> wrote in message
> news:6146AFDF-A9D3-433F-A4FB-A43A53D2A50B@.microsoft.com...
> > Hello,
> > I use Access as my database. Can someone direct me to a good source to
> > determine if I need to upgrade to MsSQL and costs involved?
> >
> > Thanks,
> > Dave
>|||If you know nothing about MSSQL then what makes you think you might want to
upgrade? Is there something Access isn't doing for you?
--
David Portas
SQL Server MVP
--|||"Brian" wrote:
> 3. The SQL Server Desktop Engine is free, and is a serious piece of
> classy technology.
Well after all it is just SQL Server with some stuff clamped down.
I would recommend this to lots of people, if only it came with Enterprise
Manager! There are a few shareware replacements, but IMHO, they suck.
Maurysql

Keeping DB schemas synched

Hi - what's the best (preferably open source or inexpensive) tool for
identifying differences (tables, columns, types, etc) between a development
database and a production one, and applying dev changes to production
automatically?
Thanks,
ChrisI don't think it is ever a good idea to make changes to a production system
"automatically". But the compare tool from www.red-gate.com is inexpensive
and should do what you are after.
Andrew J. Kelly SQL MVP
"querylous" <querylous@.discussions.microsoft.com> wrote in message
news:9E38D2DB-B107-45D1-A5D4-2E0970067AE8@.microsoft.com...
> Hi - what's the best (preferably open source or inexpensive) tool for
> identifying differences (tables, columns, types, etc) between a
> development
> database and a production one, and applying dev changes to production
> automatically?
> Thanks,
> Chris|||2nd the vote for red gate...I've used SQL COmpare and Data Compare for
several years to keep my schems and lookup data intact
Free 14 day trial, less than $300 per tool. VERY hard to beat
Kevin Hill
3NF Consulting
www.3nf-inc.com/NewsGroups.htm
www.expertsrt.com - not your average tech Q&A site
"Andrew J. Kelly" <sqlmvpnooospam@.shadhawk.com> wrote in message
news:uxykvJONGHA.2472@.TK2MSFTNGP11.phx.gbl...
>I don't think it is ever a good idea to make changes to a production system
>"automatically". But the compare tool from www.red-gate.com is inexpensive
>and should do what you are after.
> --
> Andrew J. Kelly SQL MVP
>
> "querylous" <querylous@.discussions.microsoft.com> wrote in message
> news:9E38D2DB-B107-45D1-A5D4-2E0970067AE8@.microsoft.com...
>|||Thanks Andrew- I fear I do a lot of things that aren't such good ideas when
developing! With luck, the right tool will have options to select the change
s
I'd like to apply, and then apply them.
Thanks for the rec,
Chris|||Developing is one thing, production is quite another. Yes this tool will
generate scripts for the changes but no matter how good the tool all scripts
should be tested before being applied to production.
Andrew J. Kelly SQL MVP
"querylous" <querylous@.discussions.microsoft.com> wrote in message
news:A653C08A-D917-4E85-84DE-D8B4B6A2E015@.microsoft.com...
> Thanks Andrew- I fear I do a lot of things that aren't such good ideas
> when
> developing! With luck, the right tool will have options to select the
> changes
> I'd like to apply, and then apply them.
> Thanks for the rec,
> Chris|||You should be checking your development and production scripts into some
type of source version control system. For example, Visual Source Safe has
an option to compare two projects and list files that are different, and it
has a feature for comparing two versions of a script side by side with
differences highlighted.
Also, you can script the databases to seperate folders and use a tool like
WinMerge to perform the comparisons:
http://groups.google.com/group/micr...br />
46abfa76
"querylous" <querylous@.discussions.microsoft.com> wrote in message
news:9E38D2DB-B107-45D1-A5D4-2E0970067AE8@.microsoft.com...
> Hi - what's the best (preferably open source or inexpensive) tool for
> identifying differences (tables, columns, types, etc) between a
> development
> database and a production one, and applying dev changes to production
> automatically?
> Thanks,
> Chris|||Thanks JT- unfortunately, I currently do all admin via the admin console, no
t
with scripts. Bad practice?
Chris
"JT" wrote:

> You should be checking your development and production scripts into some
> type of source version control system. For example, Visual Source Safe has
> an option to compare two projects and list files that are different, and i
t
> has a feature for comparing two versions of a script side by side with
> differences highlighted.
> Also, you can script the databases to seperate folders and use a tool like
> WinMerge to perform the comparisons:
> http://groups.google.com/group/micr... />
0c46abfa76
> "querylous" <querylous@.discussions.microsoft.com> wrote in message
> news:9E38D2DB-B107-45D1-A5D4-2E0970067AE8@.microsoft.com...
>
>|||In most SQL Server environments, changes to the database schema are
implemented as scripts; which are first tested against a DEV or QA server
and then promoted against the production server. These scripts are archived
using a source control system just like C# or Visual Basic projects.
"querylous" <querylous@.discussions.microsoft.com> wrote in message
news:86627853-B428-44F0-B94E-282A69894DF7@.microsoft.com...
> Thanks JT- unfortunately, I currently do all admin via the admin console,
> not
> with scripts. Bad practice?
> Chris
> "JT" wrote:
>

KDC Problem

Hello:
A while back I started getting KDC errors in my System log on my domain
controller. The error is:
Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 11
Date: 3/16/2005
Time: 9:34:08 AM
User: N/A
Computer: TPADC1
Description:
There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
type 10.
After researching this I did a "ldifde" dump of the active directory
database and then searched the dump and found a double entry for
"MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
domain admins accounts. Since this appeared to be a duplicate I decided to
delete it. Within a few minutes I had problems with connections to SQL. I
put it back right away and then everything was working fine again.
Obviously the SQL server has some kind of a link to this...
I have done some searching but have not found anything on it. Does anyone
have any suggestions on cleaning this up?
Harrison Midkiff
Have a look at http://support.microsoft.com/default...b;en-us;321044
Peter
"Do not awake the sleeping dragon for you are crunchy and taste good with
ketchup".
Peter The Spate
"Harrison Midkiff" wrote:

> Hello:
> A while back I started getting KDC errors in my System log on my domain
> controller. The error is:
> Event Type: Error
> Event Source: KDC
> Event Category: None
> Event ID: 11
> Date: 3/16/2005
> Time: 9:34:08 AM
> User: N/A
> Computer: TPADC1
> Description:
> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> type 10.
> After researching this I did a "ldifde" dump of the active directory
> database and then searched the dump and found a double entry for
> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> domain admins accounts. Since this appeared to be a duplicate I decided to
> delete it. Within a few minutes I had problems with connections to SQL. I
> put it back right away and then everything was working fine again.
> Obviously the SQL server has some kind of a link to this...
> I have done some searching but have not found anything on it. Does anyone
> have any suggestions on cleaning this up?
> Harrison Midkiff
>
>
|||Peter:
Thanks for replying to my post.
This is the article I followed which allowed me to find the duplicate but is
was on a user account not a computer account. I think perhaps SQL has
something in it hard coded to reference this user account.
Any suggestions welcome...
Harrison Midkiff
"Peter 'Not Peter The Spate' Nolan"
<PeterNotPeterTheSpateNolan@.discussions.microsoft. com> wrote in message
news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...[vbcol=seagreen]
> Have a look at
> http://support.microsoft.com/default...b;en-us;321044
> Peter
> "Do not awake the sleeping dragon for you are crunchy and taste good with
> ketchup".
> Peter The Spate
> "Harrison Midkiff" wrote:
|||try with setspn tool
or
1. use adsiedit.msc and show servicePrincipalName for your sql server
(computer account)
2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
delete duplicated spn
-- -- "Within a few minutes I had problems with connections to SQL. "
what? error message?
"Harrison Midkiff" wrote:

> Peter:
> Thanks for replying to my post.
> This is the article I followed which allowed me to find the duplicate but is
> was on a user account not a computer account. I think perhaps SQL has
> something in it hard coded to reference this user account.
> Any suggestions welcome...
> Harrison Midkiff
> "Peter 'Not Peter The Spate' Nolan"
> <PeterNotPeterTheSpateNolan@.discussions.microsoft. com> wrote in message
> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>
>
|||Yes. To determine which domain account is the one that is currently being
used, we can use Adsiedit.msc to delete one of the
MSSQLSvc/elvis.aviinc.local:1433 SPNs, then *restart* the SQL service(s).
The SQL service will re-add the SPN on the currently used service account.
If it was not readded, then the duplicate has been removed.
Adsiedit.msc and Ldp.exe are included on the Windows 2000 installation CD.
You can install these tools from the CD in Support\Tools\Setup.exe
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Thread-Topic: KDC Problem
>thread-index: AcUqezBszBBVWy/FSSSK8UVZqmT1Hg==
>X-WBNR-Posting-Host: 212.200.135.192
>From: "=?Utf-8?B?QWxla3NhbmRhciBHcmJpYw==?="
<AleksandarGrbic@.discussions.microsoft.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>[vbcol=seagreen]
>Subject: Re: KDC Problem
>Date: Wed, 16 Mar 2005 14:55:03 -0800
>Lines: 81
>Message-ID: <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
>charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382093
>X-Tomcat-NG: microsoft.public.sqlserver.server
>try with setspn tool
>or
>1. use adsiedit.msc and show servicePrincipalName for your sql server
>(computer account)
>2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>delete duplicated spn
>-- -- "Within a few minutes I had problems with connections to SQL. "
>what? error message?
>
>
>"Harrison Midkiff" wrote:
but is[vbcol=seagreen]
with[vbcol=seagreen]
domain[vbcol=seagreen]
MSSQLSvc/elvis.aviinc.local:1433 of[vbcol=seagreen]
the[vbcol=seagreen]
decided[vbcol=seagreen]
SQL.
>
|||Aleksandar:
Thanks for replying to my post.
The error which was appearing on the SQL Enterprise Manager was, "Unable to initialize SSPI context".
Any suggestions?
Harrison Midkiff
"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...[vbcol=seagreen]
> try with setspn tool
> or
> 1. use adsiedit.msc and show servicePrincipalName for your sql server
> (computer account)
> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
> delete duplicated spn
> -- -- "Within a few minutes I had problems with connections to SQL. "
> what? error message?
>
>
> "Harrison Midkiff" wrote:
|||Hi Harrison,
You may want to restart the SQL Server service after you have removed the
duplicate SPN. If the SPN is re-added, remove the other SPN and then
restart the SQL Server service.
Feel free to let me know if this resolves your problem.
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
<3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>Subject: Re: KDC Problem
>Date: Thu, 17 Mar 2005 13:03:45 -0500
>Lines: 254
>Organization: Audio Visual Innovations, Inc.
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
>boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: 208.5.55.183
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGP08.phx.gbl!TK2MSFTNGP0
9.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
>X-Tomcat-NG: microsoft.public.sqlserver.server
>Aleksandar:
>Thanks for replying to my post.
>The error which was appearing on the SQL Enterprise Manager was, "Unable
to initialize SSPI context".
>Any suggestions?
>Harrison Midkiff
>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...[vbcol=seagreen]
(computer account)[vbcol=seagreen]
what? error message?[vbcol=seagreen]
but is[vbcol=seagreen]
with[vbcol=seagreen]
domain[vbcol=seagreen]
MSSQLSvc/elvis.aviinc.local:1433 of[vbcol=seagreen]
the[vbcol=seagreen]
decided[vbcol=seagreen]
SQL.
>
|||In almost every case I remember SSPI errors was related with wrong DNS
records, so check the DNS.
(ex computer name is London instead of London.nwtraders.msft ) SETSPN works
with FQDN only.
Regards,
Daniel
"Harrison Midkiff" <HMidkiff@.aviinc.com> wrote in message
news:uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl...
> Hello:
> A while back I started getting KDC errors in my System log on my domain
> controller. The error is:
> Event Type: Error
> Event Source: KDC
> Event Category: None
> Event ID: 11
> Date: 3/16/2005
> Time: 9:34:08 AM
> User: N/A
> Computer: TPADC1
> Description:
> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> type 10.
> After researching this I did a "ldifde" dump of the active directory
> database and then searched the dump and found a double entry for
> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> domain admins accounts. Since this appeared to be a duplicate I decided
to
> delete it. Within a few minutes I had problems with connections to SQL.
I
> put it back right away and then everything was working fine again.
> Obviously the SQL server has some kind of a link to this...
> I have done some searching but have not found anything on it. Does anyone
> have any suggestions on cleaning this up?
> Harrison Midkiff
>
|||William:
Thanks for replying to my post. Do you know of any tech net articles which
may explain this behavior. The reason I ask is due to the sensitive nature
of SQL we are going to have a meeting before we attempt any changes.
Thanks.
Harrison Midkiff
"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
> Hi Harrison,
> You may want to restart the SQL Server service after you have removed the
> duplicate SPN. If the SPN is re-added, remove the other SPN and then
> restart the SQL Server service.
> Feel free to let me know if this resolves your problem.
> Sincerely,
> William Wang
> Microsoft Online Partner Support
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --
> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGP08.phx.gbl!TK2MSFTNGP0
> 9.phx.gbl
> to initialize SSPI context".
> message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
> (computer account)
> what? error message?
> but is
> with
> domain
> MSSQLSvc/elvis.aviinc.local:1433 of
> the
> decided
> SQL.
>
|||Hi Harrison,
The relevent articles I could find are:
305971 Windows 2000 Server Prompts Domain User for Credentials
http://support.microsoft.com/?id=305971
811889 HOW TO: Troubleshoot the "Cannot Generate SSPI Context" Error Message
http://support.microsoft.com/?id=811889
HTH!
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
<3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
<O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
<lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl>
>Subject: Re: KDC Problem
>Date: Wed, 23 Mar 2005 08:32:22 -0500
>Lines: 155
>Organization: Audio Visual Innovations, Inc.
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <Oi9BAz6LFHA.3328@.TK2MSFTNGP14.phx.gbl>
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: 208.5.55.190
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGP08.phx.gbl!TK2MSFTNGP1
4.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382949
>X-Tomcat-NG: microsoft.public.sqlserver.server
>William:
>Thanks for replying to my post. Do you know of any tech net articles
which
>may explain this behavior. The reason I ask is due to the sensitive
nature[vbcol=seagreen]
>of SQL we are going to have a meeting before we attempt any changes.
>Thanks.
>Harrison Midkiff
>"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
>news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGP08.phx.gbl!TK2MSFTNGP0[vbcol=seagreen]
>
message[vbcol=seagreen]
directory[vbcol=seagreen]
of
>
>

KDC Problem

Hello:
A while back I started getting KDC errors in my System log on my domain
controller. The error is:
Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 11
Date: 3/16/2005
Time: 9:34:08 AM
User: N/A
Computer: TPADC1
Description:
There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
type 10.
After researching this I did a "ldifde" dump of the active directory
database and then searched the dump and found a double entry for
"MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
domain admins accounts. Since this appeared to be a duplicate I decided to
delete it. Within a few minutes I had problems with connections to SQL. I
put it back right away and then everything was working fine again.
Obviously the SQL server has some kind of a link to this...
I have done some searching but have not found anything on it. Does anyone
have any suggestions on cleaning this up?
Harrison MidkiffHave a look at http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
Peter
"Do not awake the sleeping dragon for you are crunchy and taste good with
ketchup".
Peter The Spate
"Harrison Midkiff" wrote:
> Hello:
> A while back I started getting KDC errors in my System log on my domain
> controller. The error is:
> Event Type: Error
> Event Source: KDC
> Event Category: None
> Event ID: 11
> Date: 3/16/2005
> Time: 9:34:08 AM
> User: N/A
> Computer: TPADC1
> Description:
> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> type 10.
> After researching this I did a "ldifde" dump of the active directory
> database and then searched the dump and found a double entry for
> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> domain admins accounts. Since this appeared to be a duplicate I decided to
> delete it. Within a few minutes I had problems with connections to SQL. I
> put it back right away and then everything was working fine again.
> Obviously the SQL server has some kind of a link to this...
> I have done some searching but have not found anything on it. Does anyone
> have any suggestions on cleaning this up?
> Harrison Midkiff
>
>|||Peter:
Thanks for replying to my post.
This is the article I followed which allowed me to find the duplicate but is
was on a user account not a computer account. I think perhaps SQL has
something in it hard coded to reference this user account.
Any suggestions welcome...
Harrison Midkiff
"Peter 'Not Peter The Spate' Nolan"
<PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
> Have a look at
> http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
> Peter
> "Do not awake the sleeping dragon for you are crunchy and taste good with
> ketchup".
> Peter The Spate
> "Harrison Midkiff" wrote:
>> Hello:
>> A while back I started getting KDC errors in my System log on my domain
>> controller. The error is:
>> Event Type: Error
>> Event Source: KDC
>> Event Category: None
>> Event ID: 11
>> Date: 3/16/2005
>> Time: 9:34:08 AM
>> User: N/A
>> Computer: TPADC1
>> Description:
>> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
>> type 10.
>> After researching this I did a "ldifde" dump of the active directory
>> database and then searched the dump and found a double entry for
>> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
>> domain admins accounts. Since this appeared to be a duplicate I decided
>> to
>> delete it. Within a few minutes I had problems with connections to SQL.
>> I
>> put it back right away and then everything was working fine again.
>> Obviously the SQL server has some kind of a link to this...
>> I have done some searching but have not found anything on it. Does
>> anyone
>> have any suggestions on cleaning this up?
>> Harrison Midkiff
>>|||try with setspn tool
or
1. use adsiedit.msc and show servicePrincipalName for your sql server
(computer account)
2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
delete duplicated spn
-- -- "Within a few minutes I had problems with connections to SQL. "
what? error message'
"Harrison Midkiff" wrote:
> Peter:
> Thanks for replying to my post.
> This is the article I followed which allowed me to find the duplicate but is
> was on a user account not a computer account. I think perhaps SQL has
> something in it hard coded to reference this user account.
> Any suggestions welcome...
> Harrison Midkiff
> "Peter 'Not Peter The Spate' Nolan"
> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
> > Have a look at
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
> >
> > Peter
> >
> > "Do not awake the sleeping dragon for you are crunchy and taste good with
> > ketchup".
> > Peter The Spate
> >
> > "Harrison Midkiff" wrote:
> >
> >> Hello:
> >>
> >> A while back I started getting KDC errors in my System log on my domain
> >> controller. The error is:
> >>
> >> Event Type: Error
> >> Event Source: KDC
> >> Event Category: None
> >> Event ID: 11
> >> Date: 3/16/2005
> >> Time: 9:34:08 AM
> >> User: N/A
> >> Computer: TPADC1
> >> Description:
> >> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> >> type 10.
> >>
> >> After researching this I did a "ldifde" dump of the active directory
> >> database and then searched the dump and found a double entry for
> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> >> domain admins accounts. Since this appeared to be a duplicate I decided
> >> to
> >> delete it. Within a few minutes I had problems with connections to SQL.
> >> I
> >> put it back right away and then everything was working fine again.
> >> Obviously the SQL server has some kind of a link to this...
> >>
> >> I have done some searching but have not found anything on it. Does
> >> anyone
> >> have any suggestions on cleaning this up?
> >>
> >> Harrison Midkiff
> >>
> >>
> >>
>
>|||Yes. To determine which domain account is the one that is currently being
used, we can use Adsiedit.msc to delete one of the
MSSQLSvc/elvis.aviinc.local:1433 SPNs, then *restart* the SQL service(s).
The SQL service will re-add the SPN on the currently used service account.
If it was not readded, then the duplicate has been removed.
Adsiedit.msc and Ldp.exe are included on the Windows 2000 installation CD.
You can install these tools from the CD in Support\Tools\Setup.exe
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Thread-Topic: KDC Problem
>thread-index: AcUqezBszBBVWy/FSSSK8UVZqmT1Hg==>X-WBNR-Posting-Host: 212.200.135.192
>From: "=?Utf-8?B?QWxla3NhbmRhciBHcmJpYw==?="
<AleksandarGrbic@.discussions.microsoft.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
>Subject: Re: KDC Problem
>Date: Wed, 16 Mar 2005 14:55:03 -0800
>Lines: 81
>Message-ID: <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382093
>X-Tomcat-NG: microsoft.public.sqlserver.server
>try with setspn tool
>or
>1. use adsiedit.msc and show servicePrincipalName for your sql server
>(computer account)
>2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>delete duplicated spn
>-- -- "Within a few minutes I had problems with connections to SQL. "
>what? error message'
>
>
>"Harrison Midkiff" wrote:
>> Peter:
>> Thanks for replying to my post.
>> This is the article I followed which allowed me to find the duplicate
but is
>> was on a user account not a computer account. I think perhaps SQL has
>> something in it hard coded to reference this user account.
>> Any suggestions welcome...
>> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan"
>> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
>> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at
>> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste good
with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my
domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name
MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of
the
>> >> domain admins accounts. Since this appeared to be a duplicate I
decided
>> >> to
>> >> delete it. Within a few minutes I had problems with connections to
SQL.
>> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. Does
>> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >>
>>
>|||This is a multi-part message in MIME format.
--=_NextPart_000_012E_01C52AF1.C085DB50
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: quoted-printable
Aleksandar:
Thanks for replying to my post.
The error which was appearing on the SQL Enterprise Manager was, "Unable =to initialize SSPI context".
Any suggestions?
Harrison Midkiff
"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in =message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
> try with setspn tool
> > or > > 1. use adsiedit.msc and show servicePrincipalName for your sql server =
> (computer account)
> > 2. use ldp.exe and search for "servicePrincipalName=3DMSSQLSvc/elvis*"
> delete duplicated spn
> > -- -- "Within a few minutes I had problems with connections to SQL. " =
> what? error message'
> > > > > "Harrison Midkiff" wrote:
> >> Peter:
>> >> Thanks for replying to my post.
>> >> This is the article I followed which allowed me to find the duplicate =but is >> was on a user account not a computer account. I think perhaps SQL =has >> something in it hard coded to reference this user account.
>> >> Any suggestions welcome...
>> >> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan" >> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in =message >> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at >> > http://support.microsoft.com/default.aspx?scid=3Dkb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste =good with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my =domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name =MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active =directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one =of the
>> >> domain admins accounts. Since this appeared to be a duplicate I =decided >> >> to
>> >> delete it. Within a few minutes I had problems with connections =to SQL. >> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. =Does >> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >> >> >> --=_NextPart_000_012E_01C52AF1.C085DB50
Content-Type: text/html;
charset="Utf-8"
Content-Transfer-Encoding: quoted-printable
=EF=BB=BF<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
&

---

Aleksandar:
Thanks for replying to my =post.
The error which was appearing on =the SQL Enterprise Manager was, "Unable to =initialize SSPI context".
Any suggestions?
Harrison Midkiff
"Aleksandar Grbic" wrote in message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...> =try with setspn tool> > or > > 1. use adsiedit.msc and show servicePrincipalName for your sql server > (computer account)> > 2. use ldp.exe and search for "servicePrincipalName=3DMSSQLSvc/elvis*"> delete duplicated =spn> > -- -- "Within a few minutes I had problems with connections to =SQL. " > what? error message'> > > => > "Harrison Midkiff" wrote:> > Peter:> > Thanks for replying to my =post.> > This is the article I followed which allowed me to find the =duplicate but is > was on a user account not a computer account. I think perhaps SQL has > something in it hard =coded to reference this user account.> > Any suggestions =welcome...> > Harrison Midkiff> "Peter ='Not Peter The Spate' Nolan" > wrote in message > news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...> > Have a look at > => http://support.microsoft.com/default.aspx?scid=3Dkb;en-us;321044=> >> > Peter> >> > "Do not awake the sleeping dragon for you are =crunchy and taste good with> > ketchup".> > Peter The Spate> >> > "Harrison Midkiff" =wrote:> >> >> Hello:> >>> =>> A while back I started getting KDC errors in my System log on my domain> >> controller. The error is:> >>> >> Event Type: Error> >> =Event Source: KDC> >> Event Category: None> =>> Event ID: 11> >> Date: 3/16/2005> >> Time: 9:34:08 AM> >> User: N/A> =>> Computer: TPADC1> >> Description:> >> =There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 =of> >> type 10.> >>> >> After =researching this I did a "ldifde" dump of the active directory> >> =database and then searched the dump and found a double entry for> =>> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one =of the> >> domain admins accounts. Since this =appeared to be a duplicate I decided > >> to> >> =delete it. Within a few minutes I had problems with connections to SQL. > >> I> >> put it back right away and =then everything was working fine again.> >> Obviously the =SQL server has some kind of a link to this...> >>> =>> I have done some searching but have not found anything on it. Does > >> anyone> >> have any suggestions =on cleaning this up?> >>> >> Harrison Midkiff> >>> >>> >> > > >

---

--=_NextPart_000_012E_01C52AF1.C085DB50--|||Hi Harrison,
You may want to restart the SQL Server service after you have removed the
duplicate SPN. If the SPN is re-added, remove the other SPN and then
restart the SQL Server service.
Feel free to let me know if this resolves your problem.
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
<3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>Subject: Re: KDC Problem
>Date: Thu, 17 Mar 2005 13:03:45 -0500
>Lines: 254
>Organization: Audio Visual Innovations, Inc.
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
> boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: 208.5.55.183
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
9.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
>X-Tomcat-NG: microsoft.public.sqlserver.server
>Aleksandar:
>Thanks for replying to my post.
>The error which was appearing on the SQL Enterprise Manager was, "Unable
to initialize SSPI context".
>Any suggestions?
>Harrison Midkiff
>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
>> try with setspn tool
>> or
>> 1. use adsiedit.msc and show servicePrincipalName for your sql server >
(computer account)
>> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>> delete duplicated spn
>> -- -- "Within a few minutes I had problems with connections to SQL. " >
what? error message'
>>
>>
>> "Harrison Midkiff" wrote:
>> Peter:
>> Thanks for replying to my post.
>> This is the article I followed which allowed me to find the duplicate
but is
>> was on a user account not a computer account. I think perhaps SQL has
>> something in it hard coded to reference this user account.
>> Any suggestions welcome...
>> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan"
>> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
>> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at
>> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste good
with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my
domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name
MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of
the
>> >> domain admins accounts. Since this appeared to be a duplicate I
decided
>> >> to
>> >> delete it. Within a few minutes I had problems with connections to
SQL.
>> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. Does
>> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >>
>>
>|||In almost every case I remember SSPI errors was related with wrong DNS
records, so check the DNS.
(ex computer name is London instead of London.nwtraders.msft ) SETSPN works
with FQDN only.
Regards,
Daniel
"Harrison Midkiff" <HMidkiff@.aviinc.com> wrote in message
news:uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl...
> Hello:
> A while back I started getting KDC errors in my System log on my domain
> controller. The error is:
> Event Type: Error
> Event Source: KDC
> Event Category: None
> Event ID: 11
> Date: 3/16/2005
> Time: 9:34:08 AM
> User: N/A
> Computer: TPADC1
> Description:
> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> type 10.
> After researching this I did a "ldifde" dump of the active directory
> database and then searched the dump and found a double entry for
> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> domain admins accounts. Since this appeared to be a duplicate I decided
to
> delete it. Within a few minutes I had problems with connections to SQL.
I
> put it back right away and then everything was working fine again.
> Obviously the SQL server has some kind of a link to this...
> I have done some searching but have not found anything on it. Does anyone
> have any suggestions on cleaning this up?
> Harrison Midkiff
>|||William:
Thanks for replying to my post. Do you know of any tech net articles which
may explain this behavior. The reason I ask is due to the sensitive nature
of SQL we are going to have a meeting before we attempt any changes.
Thanks.
Harrison Midkiff
"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
> Hi Harrison,
> You may want to restart the SQL Server service after you have removed the
> duplicate SPN. If the SPN is re-added, remove the other SPN and then
> restart the SQL Server service.
> Feel free to let me know if this resolves your problem.
> Sincerely,
> William Wang
> Microsoft Online Partner Support
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --
>>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>>Subject: Re: KDC Problem
>>Date: Thu, 17 Mar 2005 13:03:45 -0500
>>Lines: 254
>>Organization: Audio Visual Innovations, Inc.
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative;
>> boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
>>Newsgroups: microsoft.public.sqlserver.server
>>NNTP-Posting-Host: 208.5.55.183
>>Path:
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
> 9.phx.gbl
>>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
>>X-Tomcat-NG: microsoft.public.sqlserver.server
>>Aleksandar:
>>Thanks for replying to my post.
>>The error which was appearing on the SQL Enterprise Manager was, "Unable
> to initialize SSPI context".
>>Any suggestions?
>>Harrison Midkiff
>>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
> message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
>> try with setspn tool
>> or
>> 1. use adsiedit.msc and show servicePrincipalName for your sql server >
> (computer account)
>> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>> delete duplicated spn
>> -- -- "Within a few minutes I had problems with connections to SQL. " >
> what? error message'
>>
>>
>> "Harrison Midkiff" wrote:
>> Peter:
>> Thanks for replying to my post.
>> This is the article I followed which allowed me to find the duplicate
> but is
>> was on a user account not a computer account. I think perhaps SQL has
>> something in it hard coded to reference this user account.
>> Any suggestions welcome...
>> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan"
>> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
>> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at
>> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste good
> with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my
> domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name
> MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of
> the
>> >> domain admins accounts. Since this appeared to be a duplicate I
> decided
>> >> to
>> >> delete it. Within a few minutes I had problems with connections to
> SQL.
>> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. Does
>> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >>
>>
>>
>|||Hi Harrison,
The relevent articles I could find are:
305971 Windows 2000 Server Prompts Domain User for Credentials
http://support.microsoft.com/?id=305971
811889 HOW TO: Troubleshoot the "Cannot Generate SSPI Context" Error Message
http://support.microsoft.com/?id=811889
HTH!
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
<3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
<O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
<lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl>
>Subject: Re: KDC Problem
>Date: Wed, 23 Mar 2005 08:32:22 -0500
>Lines: 155
>Organization: Audio Visual Innovations, Inc.
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <Oi9BAz6LFHA.3328@.TK2MSFTNGP14.phx.gbl>
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: 208.5.55.190
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
4.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382949
>X-Tomcat-NG: microsoft.public.sqlserver.server
>William:
>Thanks for replying to my post. Do you know of any tech net articles
which
>may explain this behavior. The reason I ask is due to the sensitive
nature
>of SQL we are going to have a meeting before we attempt any changes.
>Thanks.
>Harrison Midkiff
>"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
>news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
>> Hi Harrison,
>> You may want to restart the SQL Server service after you have removed the
>> duplicate SPN. If the SPN is re-added, remove the other SPN and then
>> restart the SQL Server service.
>> Feel free to let me know if this resolves your problem.
>> Sincerely,
>> William Wang
>> Microsoft Online Partner Support
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> --
>>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
>> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
>> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
>> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>>Subject: Re: KDC Problem
>>Date: Thu, 17 Mar 2005 13:03:45 -0500
>>Lines: 254
>>Organization: Audio Visual Innovations, Inc.
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative;
>> boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
>>Newsgroups: microsoft.public.sqlserver.server
>>NNTP-Posting-Host: 208.5.55.183
>>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
>> 9.phx.gbl
>>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
>>X-Tomcat-NG: microsoft.public.sqlserver.server
>>Aleksandar:
>>Thanks for replying to my post.
>>The error which was appearing on the SQL Enterprise Manager was, "Unable
>> to initialize SSPI context".
>>Any suggestions?
>>Harrison Midkiff
>>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
>> message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
>> try with setspn tool
>> or
>> 1. use adsiedit.msc and show servicePrincipalName for your sql server
>> (computer account)
>> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>> delete duplicated spn
>> -- -- "Within a few minutes I had problems with connections to SQL. "
>> what? error message'
>>
>>
>> "Harrison Midkiff" wrote:
>> Peter:
>> Thanks for replying to my post.
>> This is the article I followed which allowed me to find the duplicate
>> but is
>> was on a user account not a computer account. I think perhaps SQL has
>> something in it hard coded to reference this user account.
>> Any suggestions welcome...
>> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan"
>> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in
message
>> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at
>> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste good
>> with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my
>> domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name
>> MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active
directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one
of
>> the
>> >> domain admins accounts. Since this appeared to be a duplicate I
>> decided
>> >> to
>> >> delete it. Within a few minutes I had problems with connections to
>> SQL.
>> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. Does
>> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >>
>>
>>
>
>|||Hi William,
I was reading the messages posted by Harrison, it seems tobe that he has the
same problem than me, i used ldp.exe and i could find this accounts:
ldap_search_s(ld, "dc=dinamica,dc=com,dc=co", 2,
"serviceprincipalname=MSSQLSvc/ns.dinamica.com.co:1433", attrList, 0, &msg)
Result <0>: (null)
Matched DNs:
Getting 2 entries:
>> Dn: CN=Administrator,CN=Users,DC=dinamica,DC=com,DC=co
1> canonicalName: dinamica.com.co/Users/Administrator;
1> cn: Administrator;
1> description: Built-in account for administering the computer/domain;
1> distinguishedName: CN=Administrator,CN=Users,DC=dinamica,DC=com,DC=co;
4> objectClass: top; person; organizationalPerson; user;
1> name: Administrator;
>> Dn: CN=NS,OU=Domain Controllers,DC=dinamica,DC=com,DC=co
1> canonicalName: dinamica.com.co/Domain Controllers/NS;
1> cn: NS;
1> distinguishedName: CN=NS,OU=Domain Controllers,DC=dinamica,DC=com,DC=co;
5> objectClass: top; person; organizationalPerson; user; computer;
1> name: NS;
I have found two accounts, Administrator who is an user account, and the
other account is a computer account called NS, but NS is the name of the
server where SQL Server is running.
What should i do?
I hope you can help. Thanks
Javier Espinosa
"William Wang[MSFT]" wrote:
> Hi Harrison,
> The relevent articles I could find are:
> 305971 Windows 2000 Server Prompts Domain User for Credentials
> http://support.microsoft.com/?id=305971
> 811889 HOW TO: Troubleshoot the "Cannot Generate SSPI Context" Error Message
> http://support.microsoft.com/?id=811889
> HTH!
> Sincerely,
> William Wang
> Microsoft Online Partner Support
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> This posting is provided "AS IS" with no warranties, and confers no rights.
> --
> >Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
> >From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
> >References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
> <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
> <lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl>
> >Subject: Re: KDC Problem
> >Date: Wed, 23 Mar 2005 08:32:22 -0500
> >Lines: 155
> >Organization: Audio Visual Innovations, Inc.
> >X-Priority: 3
> >X-MSMail-Priority: Normal
> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >X-RFC2646: Format=Flowed; Original
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >Message-ID: <Oi9BAz6LFHA.3328@.TK2MSFTNGP14.phx.gbl>
> >Newsgroups: microsoft.public.sqlserver.server
> >NNTP-Posting-Host: 208.5.55.190
> >Path:
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
> 4.phx.gbl
> >Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382949
> >X-Tomcat-NG: microsoft.public.sqlserver.server
> >
> >William:
> >
> >Thanks for replying to my post. Do you know of any tech net articles
> which
> >may explain this behavior. The reason I ask is due to the sensitive
> nature
> >of SQL we are going to have a meeting before we attempt any changes.
> >Thanks.
> >
> >Harrison Midkiff
> >"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
> >news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
> >> Hi Harrison,
> >>
> >> You may want to restart the SQL Server service after you have removed the
> >> duplicate SPN. If the SPN is re-added, remove the other SPN and then
> >> restart the SQL Server service.
> >>
> >> Feel free to let me know if this resolves your problem.
> >>
> >> Sincerely,
> >>
> >> William Wang
> >> Microsoft Online Partner Support
> >>
> >> When responding to posts, please "Reply to Group" via your newsreader so
> >> that others may learn and benefit from your issue.
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> --
> >>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
> >>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
> >>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
> >> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
> >> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
> >> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
> >>Subject: Re: KDC Problem
> >>Date: Thu, 17 Mar 2005 13:03:45 -0500
> >>Lines: 254
> >>Organization: Audio Visual Innovations, Inc.
> >>MIME-Version: 1.0
> >>Content-Type: multipart/alternative;
> >> boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
> >>X-Priority: 3
> >>X-MSMail-Priority: Normal
> >>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
> >>Newsgroups: microsoft.public.sqlserver.server
> >>NNTP-Posting-Host: 208.5.55.183
> >>Path:
> >>
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
> >> 9.phx.gbl
> >>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
> >>X-Tomcat-NG: microsoft.public.sqlserver.server
> >>
> >>Aleksandar:
> >>Thanks for replying to my post.
> >>The error which was appearing on the SQL Enterprise Manager was, "Unable
> >> to initialize SSPI context".
> >>Any suggestions?
> >>Harrison Midkiff
> >>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
> >> message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
> >> try with setspn tool
> >>
> >> or
> >>
> >> 1. use adsiedit.msc and show servicePrincipalName for your sql server
> >
> >> (computer account)
> >>
> >> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
> >> delete duplicated spn
> >>
> >> -- -- "Within a few minutes I had problems with connections to SQL. "
> >
> >> what? error message'
> >>
> >>
> >>
> >>
> >> "Harrison Midkiff" wrote:
> >>
> >> Peter:
> >>
> >> Thanks for replying to my post.
> >>
> >> This is the article I followed which allowed me to find the duplicate
> >> but is
> >> was on a user account not a computer account. I think perhaps SQL has
> >> something in it hard coded to reference this user account.
> >>
> >> Any suggestions welcome...
> >>
> >> Harrison Midkiff
> >> "Peter 'Not Peter The Spate' Nolan"
> >> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in
> message
> >> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
> >> > Have a look at
> >> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
> >> >
> >> > Peter
> >> >
> >> > "Do not awake the sleeping dragon for you are crunchy and taste good
> >> with
> >> > ketchup".
> >> > Peter The Spate
> >> >
> >> > "Harrison Midkiff" wrote:
> >> >
> >> >> Hello:
> >> >>
> >> >> A while back I started getting KDC errors in my System log on my
> >> domain
> >> >> controller. The error is:
> >> >>
> >> >> Event Type: Error
> >> >> Event Source: KDC
> >> >> Event Category: None
> >> >> Event ID: 11
> >> >> Date: 3/16/2005
> >> >> Time: 9:34:08 AM
> >> >> User: N/A
> >> >> Computer: TPADC1
> >> >> Description:
> >> >> There are multiple accounts with name
> >> MSSQLSvc/elvis.aviinc.local:1433 of
> >> >> type 10.
> >> >>
> >> >> After researching this I did a "ldifde" dump of the active
> directory
> >> >> database and then searched the dump and found a double entry for
> >> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one
> of
> >> the
> >> >> domain admins accounts. Since this appeared to be a duplicate I
> >> decided
> >> >> to
> >> >> delete it. Within a few minutes I had problems with connections to
> >> SQL.
> >> >> I
> >> >> put it back right away and then everything was working fine again.
> >> >> Obviously the SQL server has some kind of a link to this...
> >> >>
> >> >> I have done some searching but have not found anything on it. Does
> >> >> anyone
> >> >> have any suggestions on cleaning this up?
> >> >>
> >> >> Harrison Midkiff
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
> >>
> >>
> >
> >
> >
>

KDC Problem

Hello:
A while back I started getting KDC errors in my System log on my domain
controller. The error is:
Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 11
Date: 3/16/2005
Time: 9:34:08 AM
User: N/A
Computer: TPADC1
Description:
There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
type 10.
After researching this I did a "ldifde" dump of the active directory
database and then searched the dump and found a double entry for
"MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
domain admins accounts. Since this appeared to be a duplicate I decided to
delete it. Within a few minutes I had problems with connections to SQL. I
put it back right away and then everything was working fine again.
Obviously the SQL server has some kind of a link to this...
I have done some searching but have not found anything on it. Does anyone
have any suggestions on cleaning this up?
Harrison MidkiffHave a look at [url]http://support.microsoft.com/default.aspx?scid=kb;en-us;321044[/url
]
Peter
"Do not awake the sleeping dragon for you are crunchy and taste good with
ketchup".
Peter The Spate
"Harrison Midkiff" wrote:

> Hello:
> A while back I started getting KDC errors in my System log on my domain
> controller. The error is:
> Event Type: Error
> Event Source: KDC
> Event Category: None
> Event ID: 11
> Date: 3/16/2005
> Time: 9:34:08 AM
> User: N/A
> Computer: TPADC1
> Description:
> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> type 10.
> After researching this I did a "ldifde" dump of the active directory
> database and then searched the dump and found a double entry for
> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> domain admins accounts. Since this appeared to be a duplicate I decided t
o
> delete it. Within a few minutes I had problems with connections to SQL.
I
> put it back right away and then everything was working fine again.
> Obviously the SQL server has some kind of a link to this...
> I have done some searching but have not found anything on it. Does anyone
> have any suggestions on cleaning this up?
> Harrison Midkiff
>
>|||Peter:
Thanks for replying to my post.
This is the article I followed which allowed me to find the duplicate but is
was on a user account not a computer account. I think perhaps SQL has
something in it hard coded to reference this user account.
Any suggestions welcome...
Harrison Midkiff
"Peter 'Not Peter The Spate' Nolan"
<PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...[vbcol=seagreen]
> Have a look at
> http://support.microsoft.com/defaul...kb;en-us;321044
> Peter
> "Do not awake the sleeping dragon for you are crunchy and taste good with
> ketchup".
> Peter The Spate
> "Harrison Midkiff" wrote:
>|||try with setspn tool
or
1. use adsiedit.msc and show servicePrincipalName for your sql server
(computer account)
2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
delete duplicated spn
-- -- "Within a few minutes I had problems with connections to SQL. "
what? error message'
"Harrison Midkiff" wrote:

> Peter:
> Thanks for replying to my post.
> This is the article I followed which allowed me to find the duplicate but
is
> was on a user account not a computer account. I think perhaps SQL has
> something in it hard coded to reference this user account.
> Any suggestions welcome...
> Harrison Midkiff
> "Peter 'Not Peter The Spate' Nolan"
> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>
>|||Yes. To determine which domain account is the one that is currently being
used, we can use Adsiedit.msc to delete one of the
MSSQLSvc/elvis.aviinc.local:1433 SPNs, then *restart* the SQL service(s).
The SQL service will re-add the SPN on the currently used service account.
If it was not readded, then the duplicate has been removed.
Adsiedit.msc and Ldp.exe are included on the Windows 2000 installation CD.
You can install these tools from the CD in Support\Tools\Setup.exe
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Thread-Topic: KDC Problem
>thread-index: AcUqezBszBBVWy/FSSSK8UVZqmT1Hg==
>X-WBNR-Posting-Host: 212.200.135.192
>From: "examnotes"
<AleksandarGrbic@.discussions.microsoft.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
>Subject: Re: KDC Problem
>Date: Wed, 16 Mar 2005 14:55:03 -0800
>Lines: 81
>Message-ID: <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382093
>X-Tomcat-NG: microsoft.public.sqlserver.server
>try with setspn tool
>or
>1. use adsiedit.msc and show servicePrincipalName for your sql server
>(computer account)
>2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>delete duplicated spn
>-- -- "Within a few minutes I had problems with connections to SQL. "
>what? error message'
>
>
>"Harrison Midkiff" wrote:
>
but is[vbcol=seagreen]
with[vbcol=seagreen]
domain[vbcol=seagreen]
MSSQLSvc/elvis.aviinc.local:1433 of[vbcol=seagreen]
the[vbcol=seagreen]
decided[vbcol=seagreen]
SQL.[vbcol=seagreen]
>|||Aleksandar:
Thanks for replying to my post.
The error which was appearing on the SQL Enterprise Manager was, "Unable to
initialize SSPI context".
Any suggestions?
Harrison Midkiff
"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in message news:3DA4EE9
0-C742-482D-B063-C81B448C47E1@.microsoft.com...[vbcol=seagreen]
> try with setspn tool
>
> or
>
> 1. use adsiedit.msc and show servicePrincipalName for your sql server
> (computer account)
>
> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
> delete duplicated spn
>
> -- -- "Within a few minutes I had problems with connections to SQL. "
> what? error message'
>
>
>
>
> "Harrison Midkiff" wrote:
>|||Hi Harrison,
You may want to restart the SQL Server service after you have removed the
duplicate SPN. If the SPN is re-added, remove the other SPN and then
restart the SQL Server service.
Feel free to let me know if this resolves your problem.
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
<3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>Subject: Re: KDC Problem
>Date: Thu, 17 Mar 2005 13:03:45 -0500
>Lines: 254
>Organization: Audio Visual Innovations, Inc.
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
> boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: 208.5.55.183
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
9.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
>X-Tomcat-NG: microsoft.public.sqlserver.server
>Aleksandar:
>Thanks for replying to my post.
>The error which was appearing on the SQL Enterprise Manager was, "Unable
to initialize SSPI context".
>Any suggestions?
>Harrison Midkiff
>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
(computer account)[vbcol=seagreen]
what? error message'[vbcol=seagreen]
but is[vbcol=seagreen]
with[vbcol=seagreen]
domain[vbcol=seagreen]
MSSQLSvc/elvis.aviinc.local:1433 of[vbcol=seagreen]
the[vbcol=seagreen]
decided[vbcol=seagreen]
SQL.[vbcol=seagreen]
>|||In almost every case I remember SSPI errors was related with wrong DNS
records, so check the DNS.
(ex computer name is London instead of London.nwtraders.msft ) SETSPN works
with FQDN only.
Regards,
Daniel
"Harrison Midkiff" <HMidkiff@.aviinc.com> wrote in message
news:uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl...
> Hello:
> A while back I started getting KDC errors in my System log on my domain
> controller. The error is:
> Event Type: Error
> Event Source: KDC
> Event Category: None
> Event ID: 11
> Date: 3/16/2005
> Time: 9:34:08 AM
> User: N/A
> Computer: TPADC1
> Description:
> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> type 10.
> After researching this I did a "ldifde" dump of the active directory
> database and then searched the dump and found a double entry for
> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> domain admins accounts. Since this appeared to be a duplicate I decided
to
> delete it. Within a few minutes I had problems with connections to SQL.
I
> put it back right away and then everything was working fine again.
> Obviously the SQL server has some kind of a link to this...
> I have done some searching but have not found anything on it. Does anyone
> have any suggestions on cleaning this up?
> Harrison Midkiff
>|||William:
Thanks for replying to my post. Do you know of any tech net articles which
may explain this behavior. The reason I ask is due to the sensitive nature
of SQL we are going to have a meeting before we attempt any changes.
Thanks.
Harrison Midkiff
"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
> Hi Harrison,
> You may want to restart the SQL Server service after you have removed the
> duplicate SPN. If the SPN is re-added, remove the other SPN and then
> restart the SQL Server service.
> Feel free to let me know if this resolves your problem.
> Sincerely,
> William Wang
> Microsoft Online Partner Support
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --
> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNG
P0
> 9.phx.gbl
> to initialize SSPI context".
> message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
> (computer account)
> what? error message'
> but is
> with
> domain
> MSSQLSvc/elvis.aviinc.local:1433 of
> the
> decided
> SQL.
>|||Hi Harrison,
The relevent articles I could find are:
305971 Windows 2000 Server Prompts Domain User for Credentials
http://support.microsoft.com/?id=305971
811889 HOW TO: Troubleshoot the "Cannot Generate SSPI Context" Error Message
http://support.microsoft.com/?id=811889
HTH!
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
<3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
<O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
<lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl>
>Subject: Re: KDC Problem
>Date: Wed, 23 Mar 2005 08:32:22 -0500
>Lines: 155
>Organization: Audio Visual Innovations, Inc.
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <Oi9BAz6LFHA.3328@.TK2MSFTNGP14.phx.gbl>
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: 208.5.55.190
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
4.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382949
>X-Tomcat-NG: microsoft.public.sqlserver.server
>William:
>Thanks for replying to my post. Do you know of any tech net articles
which
>may explain this behavior. The reason I ask is due to the sensitive
nature
>of SQL we are going to have a meeting before we attempt any changes.
>Thanks.
>Harrison Midkiff
>"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
>news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0[vbcol=seagreen]
>
>
message[vbcol=seagreen]
directory[vbcol=seagreen]
of[vbcol=seagreen]
>
>

KDC Error

Hello:
I am getting a KDC error on my domain controllers system log. The error is
below.
Event Source: KDC
Event ID: 11
Description:
There are multiple accounts with name "MSSQLSvc/computer.domain.local:1433"
of type 10.
I have tracked this down to one of the developers domain admin accounts. It
is the "servicePrincipalName" on his account. This is the same
"servicePrincipalName" as the SQL server. I research this before and it was
thought perhaps he had install SQL under this account or at one point SQL
was running under this account. When I removed it SQL basically shutdown.
I immediately put it back. Later someone told me I should have just stopped
and restarted the SQL service and it would have corrected the problem.
Can anyone give me any input on this? This is a major production server and
I want to be very careful.
Harrison MidkiffHi
I am not sure about what the cause of this problem is, but the solution may
be to create a new service account, set SQL Server to use this account,
stop/restart SQL server at a scheduled time. Changing the old service accoun
t
should then not effect the SQL Server.
John
"Harrison Midkiff" wrote:

> Hello:
> I am getting a KDC error on my domain controllers system log. The error i
s
> below.
> Event Source: KDC
> Event ID: 11
> Description:
> There are multiple accounts with name "MSSQLSvc/computer.domain.local:1433
"
> of type 10.
> I have tracked this down to one of the developers domain admin accounts.
It
> is the "servicePrincipalName" on his account. This is the same
> "servicePrincipalName" as the SQL server. I research this before and it w
as
> thought perhaps he had install SQL under this account or at one point SQL
> was running under this account. When I removed it SQL basically shutdown
.
> I immediately put it back. Later someone told me I should have just stopp
ed
> and restarted the SQL service and it would have corrected the problem.
> Can anyone give me any input on this? This is a major production server a
nd
> I want to be very careful.
> Harrison Midkiff
>
>|||Hi Harrison ,
This issue can occur if SQL accout is changed from Machine account to
service account. The SPN for the machine account was not removed from the
domain.
I suggest that you use LDIFDE to export the domain to text file and seach
for MSSQLSVC.
Syntax was:
LDIFDE -d DC=DEFIANT,DC=pactsolutions,DC=com, DC=au -f c:\export.txt
After you locate the duplicate SPN, you can use the Adsiedit.msc tool to go
to the object, view the duplicate SPN value, and remove the duplicate SPN
value. To determine which one was the one in current use, please delete one
of the
MSSQLSvc/uohssrv1.uohs.uottawa.ca:1433 SPNs, then restarted the SQL
service(s).
The SQL service will re-add the SPN on the currently in use service
account. If it is not readded, then the duplicate has been removed.
You can refer to the following article for more related information about
Kerberos Terminology and Service Principle Name (SPN).
811889.KB.EN-US HOW TO: Troubleshoot the "Cannot Generate SSPI Context"
Error Message
http://support.microsoft.com/defaul...KB;EN-US;811889
Hope this helps.
Best regards,
Vincent Xu
Microsoft Online Partner Support
========================================
==============
Get Secure! - www.microsoft.com/security
========================================
==============
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
========================================
==============
This posting is provided "AS IS" with no warranties,and confers no rights.
========================================
==============
--[vbcol=seagreen]
is[vbcol=seagreen]
"MSSQLSvc/computer.domain.local:1433"[vbcol=seagreen]
It[vbcol=seagreen]
was[vbcol=seagreen]
shutdown.[vbcol=seagreen]
stopped[vbcol=seagreen]
and[vbcol=seagreen]

KDC Error

Hello:
I am getting a KDC error on my domain controllers system log. The error is
below.
Event Source: KDC
Event ID: 11
Description:
There are multiple accounts with name "MSSQLSvc/computer.domain.local:1433"
of type 10.
I have tracked this down to one of the developers domain admin accounts. It
is the "servicePrincipalName" on his account. This is the same
"servicePrincipalName" as the SQL server. I research this before and it was
thought perhaps he had install SQL under this account or at one point SQL
was running under this account. When I removed it SQL basically shutdown.
I immediately put it back. Later someone told me I should have just stopped
and restarted the SQL service and it would have corrected the problem.
Can anyone give me any input on this? This is a major production server and
I want to be very careful.
Harrison MidkiffHi
I am not sure about what the cause of this problem is, but the solution may
be to create a new service account, set SQL Server to use this account,
stop/restart SQL server at a scheduled time. Changing the old service account
should then not effect the SQL Server.
John
"Harrison Midkiff" wrote:
> Hello:
> I am getting a KDC error on my domain controllers system log. The error is
> below.
> Event Source: KDC
> Event ID: 11
> Description:
> There are multiple accounts with name "MSSQLSvc/computer.domain.local:1433"
> of type 10.
> I have tracked this down to one of the developers domain admin accounts. It
> is the "servicePrincipalName" on his account. This is the same
> "servicePrincipalName" as the SQL server. I research this before and it was
> thought perhaps he had install SQL under this account or at one point SQL
> was running under this account. When I removed it SQL basically shutdown.
> I immediately put it back. Later someone told me I should have just stopped
> and restarted the SQL service and it would have corrected the problem.
> Can anyone give me any input on this? This is a major production server and
> I want to be very careful.
> Harrison Midkiff
>
>|||Hi Harrison ,
This issue can occur if SQL accout is changed from Machine account to
service account. The SPN for the machine account was not removed from the
domain.
I suggest that you use LDIFDE to export the domain to text file and seach
for MSSQLSVC.
Syntax was:
LDIFDE -d DC=DEFIANT,DC=pactsolutions,DC=com, DC=au -f c:\export.txt
After you locate the duplicate SPN, you can use the Adsiedit.msc tool to go
to the object, view the duplicate SPN value, and remove the duplicate SPN
value. To determine which one was the one in current use, please delete one
of the
MSSQLSvc/uohssrv1.uohs.uottawa.ca:1433 SPNs, then restarted the SQL
service(s).
The SQL service will re-add the SPN on the currently in use service
account. If it is not readded, then the duplicate has been removed.
You can refer to the following article for more related information about
Kerberos Terminology and Service Principle Name (SPN).
811889.KB.EN-US HOW TO: Troubleshoot the "Cannot Generate SSPI Context"
Error Message
http://support.microsoft.com/default.aspx?scid=KB;EN-US;811889
Hope this helps.
Best regards,
Vincent Xu
Microsoft Online Partner Support
======================================================Get Secure! - www.microsoft.com/security
======================================================When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================>>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>Subject: KDC Error
>>Date: Thu, 11 May 2006 19:00:26 -0400
>>Lines: 25
>>Organization: Audio Visual Innovations, Inc.
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>>X-RFC2646: Format=Flowed; Original
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>>Message-ID: <eVgny6UdGHA.3348@.TK2MSFTNGP03.phx.gbl>
>>Newsgroups: microsoft.public.sqlserver.server
>>NNTP-Posting-Host: 208.5.55.190
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.server:431203
>>X-Tomcat-NG: microsoft.public.sqlserver.server
>>Hello:
>>I am getting a KDC error on my domain controllers system log. The error
is
>>below.
>>Event Source: KDC
>>Event ID: 11
>>Description:
>>There are multiple accounts with name
"MSSQLSvc/computer.domain.local:1433"
>>of type 10.
>>I have tracked this down to one of the developers domain admin accounts.
It
>>is the "servicePrincipalName" on his account. This is the same
>>"servicePrincipalName" as the SQL server. I research this before and it
was
>>thought perhaps he had install SQL under this account or at one point SQL
>>was running under this account. When I removed it SQL basically
shutdown.
>>I immediately put it back. Later someone told me I should have just
stopped
>>and restarted the SQL service and it would have corrected the problem.
>>Can anyone give me any input on this? This is a major production server
and
>>I want to be very careful.
>>Harrison Midkiff
>>