Sample Header Ad - 728x90

Can an AD service account host SPNs for multiple SQL Instances?

0 votes
1 answer
2999 views
Trying to set up Kerberos Authentication between two linked server to get past the double-hop issue. Server A is in a domain with several other SQL Servers. All SQL instances on all servers in this domain are using the same service (user) account for running the instance. Server B is in another domain using a separate domain account to run its instance. It is currently the only SQL server running with a domain account. Other are using local accounts. I am configuring Server B's service account to allow for self managing SPN's which *should* be easy. My problem is I will need to do this with Server A's service account as well. I can't find what I would like to make this clear to me but I am concerned about how Server A's service account will work once I allow it to "self manage" its SPNs i.e. give the AD account read/write ServicePrincipalNames of itself. Can an AD service account host SPNs for multiple SQL Instances? Currently the account is not hosting any when I query it via setspn -L [domainname]\sqlengine All SQL servers are running 2008 or higher. Most are 2016.
Asked by Matt (365 rep)
Feb 10, 2021, 08:38 PM
Last activity: Feb 11, 2021, 07:55 AM