asked on

Event ID 11 KDC error messages

I have three domain controllers that keep giving me the same problem, Event ID 11, source KDC. There are 3 variations of the same description:

"There are multiple accounts with name MSSQLSvc/PROD-DATAOps.domainname.com:1433 of type DS_SERVICE_PRINCIPAL_NAME."

"There are multiple accounts with name MSSQLSvc/dev-dataopsrd.domainname.com:1433 of type DS_SERVICE_PRINCIPAL_NAME."

"There are multiple accounts with name MSSQLSvc/do-sqld2.domainname.com:1433 of type DS_SERVICE_PRINCIPAL_NAME."

All three of these computers are set to have the MS SQL server Service start with an account called svcSQLServer,

Can anyone shed some light on this?

Thanks

Netman66

See if anything here can help out:

http://www.eventid.net/display.asp?eventid=11&eventno=569&source=KDC&phase=1

seanlabrie

ASKER

I've read through that page. I've searched using ldifde but I can't seem to find any duplicates. I can locate one User account with the SPN and I can locate 1 Computer account with the SPN. But I'm not sure how to handle this, should only the user account had the spn and it needs to be deleted from the computer account or vice versa? Does the computer account even matter here?

Thanks,

ASKER CERTIFIED SOLUTION

Netman66

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

seanlabrie

ASKER

Yes, I went ahead and deleted the SPN from the computer accounts to see what happens. When SQL was originally installed it used the local system account on each of those PCs.

seanlabrie

ASKER

removing the machine accounts worked. Thanks