One of my favorite new features of Windows Server 2008 is the addition of the -X parameter to the SETSPN command. It finds duplicate SPNs. This can be very helpful when setting up and troubleshooting Kerberos.
Except it doesn't always work.
Instead, I've found this tool called DelegConfig to be incredibly helpful when configuring Kerberos and it detects duplicate SPNs when SETSPN -X does not:
http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1887
Posted
Thu, Dec 24 2009 7:32 PM
by
DavidL