| |
Built-in SPNs Recognized for Computer Accounts |
|
|
Subject: Built-in SPNs Recognized for Computer Accounts
Author: Alex_Raj
In response to: What happens if SPNs are not EVER set?
Posted on: 05/30/2006 08:31:52 PM
The built-in SPNs that are recognized for computer accounts are listed below. These SPNs are recognized for computer accounts if the computer has a HOST SPN. Unless they are explicitly placed on objects, a HOST SPN can substitute for any of the listed SPNs.
alerter appmgmt browser cifs cisvc clipsrv dcom dhcp
dmserver dns dnscache eventlog eventsystem fax
http ias iisad min messenger msiserver mcsvc netdde
netddedsm netlogon netman nmagent oakley plugplay
policyagent protectedstorage rasman remoteaccess replicator
rpc rpclocator rpcss rsvp samss scardsvr scesrv schedule
scm seclogon snmp spooler tapisrv time trksvr trkwks
ups w3svc wins www
>
> On 05/30/2006 08:30:02 PM Alex_Raj wrote:
Chances are your service is a well-known service, like HTTP, TIME, and you need not to specifically register your service. Otherwise, KDC_ERR_C_PRINCIPAL_UNKNOWN or a KDC_ERR_S_PRINCIPAL_UNKNOWN error.
References:
|
|
|
|
