KDC Event ID 11

[BD]

In the System Log of our domain controller we are now
getting the following error:
There are multiple accounts with name MSSQLSvc/<computer
name.domain name>: 1433 of type 10.
Source: KDC, Category: None, Event ID: 11

One of our users accidently put a test DC on wth network
with the DC providing this error. Both DCs have identical
names and applications. The second server was quickly
removed but it seems to have replicated some data.

How do I go about getting rid of this error?

Brian

 

[Richard McCall [MSFT]]

You have recently change the account that the SQL service starts up as. When
you do this SQL registers the SPN on the user account. The SQL server you
configured with a second account was <computername> in the event log. You
can use ADSIedit to remove the SPN from the First account. If you are unsure
which account the you can use this ldifde and search the output for the SPN
string.

ldifde -f ldif.txt - t 3268 -d "dc=domain,dc=com" -l serviceprincipalname -r
"(serviceprincipalname=MSSQL*)" -p subtree