Getting Event ID 11 KDC error duplicate cifs names

Posted on 2008-11-17
Last Modified: 2012-06-27
Getting these events going back to August 2008 on a DC. When I do a search in AD on just the Domain, only one object shows up. When I repeat the search selecting Entire Directory instead of just the Domain, two objects show up. We have multiple Domains. On the second search, the duplicate object that shows up doesn't look right. It has no description and when I click on it, I get a popup saying "a referral was returned from the server". Then the properties are display but there is no information on any of the tabs.
My question is can I just delete this object using ADUC or ADSIEdit without causing any issues with the valid object?

Event Type:      Error
Event Source:      KDC
Event Category:      None
Event ID:      11
Date:            11/17/2008
Time:            9:23:51 AM
User:            N/A
Computer:      GLS1PRADC04
There are multiple accounts with name cifs/3088A of type DS_SERVICE_PRINCIPAL_NAME.

For more information, see Help and Support Center at
Question by:osiexchange
    LVL 28

    Assisted Solution


    I think deleting the wrong entry should solve it .. as usual: "your mileage may vary..."

    Author Comment

    Yeah, I saw that article. I was still unsure. Just wondering if anyone had any first hand experience with this.
    LVL 31

    Accepted Solution

    Yes, you nead to search LDAP for what computer/user accounts are having the conflicting SPN set and delete the extra one that isn't used. CIFS SPN is part of HOST SPN (normally only HOST is used), so make a search for */3088A to find both prefixes.
    C:\>dsquery * -filter "(servicePrincipalName=*/3088A)" -attr name

    Run following command to list what SPNs are set for accountname
    C:\>setspn -L accountname

    Run the following command to delete HOST/3088A from accountname:
    C:\>setspn -D HOST/3088A accountname

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    Log files are useful in diagnosing and repairing problems.  This is a list of common log files and their standard locations that I've compiled.   While this is not exhaustive, it is a pretty good list that I've found to be useful.  I may update it f…
    Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now