Hello.
We're having an issue occasionally where a PC object is created in AD via automation.
Then, the PC joins the domain, it creates 3 SPN entries on that existing object.
Upon reboot, sometimes we're seeing the PC connect to a different DC and creating 2 more SPN entries on the object before the DCs had a chance to replicate.
When the objects replicate on the DCs, the last change is winning (overwriting the first 3 SPN entries). This is causing issues obviously.
My question is, we're thinking of injecting all 5 of the SPN entries when the object is created via that automation. When the PC joins the domain and reboots, will it overwrite the SPN entries if it already sees them there? Or will it just leave them alone? Anyone know?
Thanks.
