Joy Smith San (6/24/2015)
No Joie.
setspn -S MSSQLSvc/[sqlinstance] [domain]\[svcaccount]I was running exactly the same command. Then it gave the message "Updated SPN...." but still logging this error in errorlog and was using NTLM authentication only. So I was trying to list out the SPNs registered for that service account, then the above error.
I suspect the SPN din't get registered properly. Now to troubleshoot, no idea where to start with.
Active Directory team is not cooperating much and just say they are not aware about SPNs 🙂 .
Thanks.
The user account has to be trusted for delegation also, the SPNs may be manually manipulated via ADSIEdit, any good AD admin should be capable of this.
Check you don't have duplicate and incorrect SPNs registered against the user account this will also cause issues. Later versions of SETSPN actually check and report duplicates.
-----------------------------------------------------------------------------------------------------------
"Ya can't make an omelette without breaking just a few eggs" 😉