Registering SPN

-- Tells you whether you are using NTLM or Kerberos

select auth_scheme from sys.dm_exec_connections where session_id=@@spid

-- Gives a list of spn's registered

setspn.exe -L servername

Steps to take before registering spn's on the sql server:

The SPN must be registered for the SQL Server service instance

The service a/c (domain\userid) must be trusted for delegation. The user (domain\userid) Active Directory property, Account is sensitive and cannot be delegated, must not be selected.

To register the SPN at the AD we need to know the following information

1) The service (MSSQLSVC)

2) The Fully Qualified Domain Name (FQDN) of the system on which the service is installed (servername.industry.company.com )

3) The TCP/IP port no. on which the service is listening. (1433)

4) The startup account with which the service is started. (domain\userid)



Run the following command on sql server to register the SPN:

C:\Program Files (x86)\Resource Kit>setspn -A MSSQLSVC/servername.industry.company.com:1433 domain\userid (Enter)