r/SQLServer•
conflab

[Question] Can I register an SPN for a SQL Server instance "online"?

tl;dr: Pretty much what it says in the title.

We're currently in the process of moving a number of databases from one instance (default) to another (named). There are a number of people in the bussines (and other systems) that have connection strings to these databases, so to lessen the impact of this move I was following the advice here.

I can now connect to the instance with the old servers' host name, but with windows authentication I get the error caused Kerberos authentication not working as the principal name is incorrect. Can I run setspn online without impacting the stuff currently running on the server?

Posted Feb 22, 2017, 4:54 PM UTC

34
sbrick89•

setspn just updates an attribute in active directory... I can't recall offhand whether you need to bounce the SQL Service for it to take effect.

1
Explosive_DiaeresisDatabase Administrator•

We recently had to do this en masse, to force connections off of NTLM. Simply reconnecting worked without having to restart the instance.

1
lost_in_life_34•

there is a process out there but we just run sql server under an admin account with AD rights

-4
sbrick89•

ew, ew, ew, ew

2