Blog Post

SQL Server Support Blog
3 MIN READ

How to grant ReadServicePrincipalName and WriteServicePrincipalName rights to SQL Server service start-up account without using ADSDIEDIT tool.

Krishnakumar_Rukmangathan's avatar
Krishnakumar_Rukmangathan
Icon for Microsoft rankMicrosoft
Jan 15, 2019
First published on MSDN on Jan 06, 2010 I hope you probably know how to fix below different authentication related errors that can occur while connecting to SQL Server with...
Updated Jan 15, 2019
Version 2.0
Connectivity
security
Gavinsm3's avatar
Gavinsm3
Copper Contributor
Jun 05, 2024

Thank you for this article Krishnakumar_Rukmangathan - it was very informative! We have over 150 gMSAs and are running SETSPN all the time for our clustered servers. 

 

Two questions- 1) why Shouldn't you set with dscals on SQL Clusters? 

2) Is possible to set the security on the container named (some may call it an OU) "Managed Service Accounts" so that new accounts can have the rights to register?  

 

Thank you