Register SQL2000 in AD

  • Thread starter Thread starter larry
  • Start date Start date
L

larry

In SQL Server Properties I can "Add this instance of SQL Server to
Active Directory". Where does this added instance show itself?
Thanks
Larry
 
I believe that function registers an SPN to the computer account object in
Active Directory. You can list registered SPN's by using setspn.exe (this exe
may only be on Windows Server):
setspn.exe -l [objectname]
setspn.exe -l SQLSERVER

SQL automatically registers an SQN to the computer account object when it is
installed. You can use setspn to add and remove SPN's. SPN's (service
principal names) are registered in Active Directory objects and used for
client to service authentication. This would be used for SQL Windows
Authentication.
 
Thanks Brandon. "setspn -L sqlserver" returns
MSSQLSvc/sqlserver.domain.com:1433, but I was expecting something to
show up in administrative tools\active directory computers. Am I wrong
in thinking this?

Brandon said:
I believe that function registers an SPN to the computer account object in
Active Directory. You can list registered SPN's by using setspn.exe (this exe
may only be on Windows Server):
setspn.exe -l [objectname]
setspn.exe -l SQLSERVER

SQL automatically registers an SQN to the computer account object when it is
installed. You can use setspn to add and remove SPN's. SPN's (service
principal names) are registered in Active Directory objects and used for
client to service authentication. This would be used for SQL Windows
Authentication.

:

In SQL Server Properties I can "Add this instance of SQL Server to
Active Directory". Where does this added instance show itself?
Thanks
Larry
 
I too thought it was going to register the SQL instance in the Computers
container, but it apparently does not. Regardless, the instance is registered
in AD and clients can authenticate to the instance, using Kerberos.

larry said:
Thanks Brandon. "setspn -L sqlserver" returns
MSSQLSvc/sqlserver.domain.com:1433, but I was expecting something to
show up in administrative tools\active directory computers. Am I wrong
in thinking this?

Brandon said:
I believe that function registers an SPN to the computer account object in
Active Directory. You can list registered SPN's by using setspn.exe (this exe
may only be on Windows Server):
setspn.exe -l [objectname]
setspn.exe -l SQLSERVER

SQL automatically registers an SQN to the computer account object when it is
installed. You can use setspn to add and remove SPN's. SPN's (service
principal names) are registered in Active Directory objects and used for
client to service authentication. This would be used for SQL Windows
Authentication.

:

In SQL Server Properties I can "Add this instance of SQL Server to
Active Directory". Where does this added instance show itself?
Thanks
Larry
 
Thanks

Brandon said:
I too thought it was going to register the SQL instance in the Computers
container, but it apparently does not. Regardless, the instance is registered
in AD and clients can authenticate to the instance, using Kerberos.

:

Thanks Brandon. "setspn -L sqlserver" returns
MSSQLSvc/sqlserver.domain.com:1433, but I was expecting something to
show up in administrative tools\active directory computers. Am I wrong
in thinking this?

Brandon said:
I believe that function registers an SPN to the computer account object in
Active Directory. You can list registered SPN's by using setspn.exe (this exe
may only be on Windows Server):
setspn.exe -l [objectname]
setspn.exe -l SQLSERVER

SQL automatically registers an SQN to the computer account object when it is
installed. You can use setspn to add and remove SPN's. SPN's (service
principal names) are registered in Active Directory objects and used for
client to service authentication. This would be used for SQL Windows
Authentication.

:



In SQL Server Properties I can "Add this instance of SQL Server to
Active Directory". Where does this added instance show itself?
Thanks
Larry
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top