Update 4/26/11: This post has been updated to include additional steps to ensure Kerberos authentication can be used for OAB downloads by domain-connected Outlook clients. With Exchange 2010, ...
Updated Jul 01, 2019
Version 2.0
Blog Post
Hi,
I set the spn's for my new exchange 2010 environment, and its now prompting users for authentication within OCS, and possibly Outlook. I checked to make sure I didn't have any duplicate spn's, but something has obviously gone wrong. I apparently need to delete, or re-add a SPN to fix this, but am not sure if I am supposed to run 'setspn -A exchangeAB/' with my GC server, CAS, or Mailbox servers?
All I ran was these commands-
Setspn -S http/mail.mycompany.com mycompanycasarray$
Setspn -S http/autodiscover.mycompany.com mycompanycasarray$
Setspn -S http/autodiscover.myothercompany.com mycompanycasarray$
Setspn -S exchangeMDB/cas.mycompany.com mycompanycasarray$
Setspn -S exchangeRFR/cas.mycompany.com mycompanycasarray$
Setspn -S exchangeAB/cas.mycompany.com mycompanycasarray$
Please help!!