Released: update for Kerberos Configuration Manager for SQL Server

Published Jan 17 2020 11:25 AM 5,402 Views
Microsoft

The Kerberos Configuration Manager for SQL Server is a diagnostic tool that helps troubleshoot Kerberos related connectivity issues with SQL Server, SQL Server Reporting Services (SSRS), and SQL Server Analysis Services (SSAS). It can perform the following functions:

  • Collect information about operating system (OS), Microsoft SQL Server instances, and Always On Availability Group Listeners installed on a server.
  • Report all Service Principal Name (SPN) and delegation configurations on the server.
  • Identify potential problems in SPNs and delegations.
  • Fix potential SPN problems.

The new release (v4.2) adds support for SQL Server 2019.

 

You can download the tool here, as well as read its install and usage instructions. 

7 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-1115388%22%20slang%3D%22en-US%22%3EReleased%3A%20update%20for%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1115388%22%20slang%3D%22en-US%22%3E%3CP%20class%3D%22%22%3EThe%20%3CSTRONG%3EKerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FSTRONG%3E%20is%20a%20diagnostic%20tool%20that%20helps%20troubleshoot%20Kerberos%20related%20connectivity%20issues%20with%20SQL%20Server%2C%20SQL%20Server%20Reporting%20Services%20(SSRS)%2C%20and%20SQL%20Server%20Analysis%20Services%20(SSAS).%20It%20can%20perform%20the%20following%20functions%3A%3C%2FP%3E%0A%3CUL%20class%3D%22sbody-free_list%22%3E%0A%3CLI%3ECollect%20information%20about%20operating%20system%20(OS)%2C%20Microsoft%20SQL%20Server%20instances%2C%20and%20Always%20On%20Availability%20Group%20Listeners%20installed%20on%20a%20server.%3C%2FLI%3E%0A%3CLI%3EReport%20all%20Service%20Principal%20Name%20(SPN)%20and%20delegation%20configurations%20on%20the%20server.%3C%2FLI%3E%0A%3CLI%3EIdentify%20potential%20problems%20in%20SPNs%20and%20delegations.%3C%2FLI%3E%0A%3CLI%3EFix%20potential%20SPN%20problems.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%3EThe%20new%20release%20(v4.2)%20adds%20support%20for%20SQL%20Server%202019.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20download%20the%20tool%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D39046%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehere%3C%2FA%3E%2C%20as%20well%20as%20read%20its%20install%20and%20usage%20instructions.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1115388%22%20slang%3D%22en-US%22%3E%3CP%20class%3D%22%22%3EThe%26nbsp%3B%3CSPAN%3E%3CSTRONG%3EMicrosoft%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FSTRONG%3E%20is%20a%20diagnostic%20tool%20that%20helps%20troubleshoot%20Kerberos%20related%20connectivity%20issues%20with%20SQL%20Server.%20The%20new%20release%20supports%20SQL%20Server%202019.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1115388%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESQLReleases%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1117679%22%20slang%3D%22en-US%22%3ERe%3A%20Released%3A%20update%20for%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1117679%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Pedro%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFirst%20of%20all%20thank%20you%20for%20the%20latest%20version!%20I've%20been%20using%20this%20tool%20for%20quite%20some%20time%20now%20and%20it%20works%20great.%3C%2FP%3E%3CP%3EOne%20remark%20though%3B%20If%20you're%20using%20GMSA%20accounts%20for%20your%20SQL%20Server%20this%20till%20will%20set%20them%2C%20and%20if%20you%20run%20the%20tool%20again%20it%20will%20give%20the%20status%20%22Misplaced%22.%20When%20you%20fix%20it%20and%20check%20again%20same%20story...%3C%2FP%3E%3CP%3EWhen%20i%20check%20it%20via%20setspn%20-l%20accountname%20it%20shows%20the%20SPN%20that%20was%20set%20via%20the%20tool...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20would%20be%20great%20if%20this%20could%20be%20addressed%20and%20fixed%20as%20well.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20thoughts%20about%20this%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you.%3C%2FP%3E%3CP%3ETeun%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1126819%22%20slang%3D%22en-US%22%3ERe%3A%20Released%3A%20update%20for%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1126819%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20the%20update%2C%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F194232%22%20target%3D%22_blank%22%3E%40Pedro%20Lopes%3C%2FA%3E%26nbsp%3B!%3C%2FP%3E%3CP%3ESupport%20SQL%20Server%202019%20is%20what%20was%20really%20missing%20in%20the%20previous%20version.%20Great%20job!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1187237%22%20slang%3D%22en-US%22%3ERe%3A%20Released%3A%20update%20for%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1187237%22%20slang%3D%22en-US%22%3EAre%20there%20circumstances%20where%20SPN%20with%20the%20HOSTNAME%2F%20NETBIOS%20name%20is%20needed%20along%20with%20the%20default%20SPNs%20with%20Fully%20Qualified%20Domain%20Name%20(FQDN)%3F%20This%20rumor%20can%20be%20found%20here%20%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fdataaccesstechnologies%2F2016%2F04%2F27%2Fsqlcmd-2014-fails-to-authenticate-via-kerberos%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.msdn.microsoft.com%2Fdataaccesstechnologies%2F2016%2F04%2F27%2Fsqlcmd-2014-fails-to-authenticate-via-kerberos%2F%3C%2FA%3E.%20Would%20this%20also%20apply%20when%20running%20SQL%20Server%20under%20a%20domain%20service%20account%3F%20I%20have%20noticed%20the%20new%20release%20(4.2)%20refuses%20to%20install%20over%20the%20old%20release%2C%20falsely%20claiming%20that%20a%20newer%20release%20is%20already%20installed.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1187473%22%20slang%3D%22en-US%22%3ERe%3A%20Released%3A%20update%20for%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1187473%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F565177%22%20target%3D%22_blank%22%3E%40pgriffith%3C%2FA%3E%26nbsp%3Bthat%20is%20a%20SQLCMD%20requirement%20and%20uncommon.%20The%20tool%20generates%20all%20required%20SPNs%20as%20stated%20in%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsql%2Fdatabase-engine%2Fconfigure-windows%2Fregister-a-service-principal-name-for-kerberos-connections%3Fview%3Dsql-server-ver15%23Formats%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsql%2Fdatabase-engine%2Fconfigure-windows%2Fregister-a-service-principal-name-for-kerberos-connections%23Formats%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1188589%22%20slang%3D%22en-US%22%3ERe%3A%20Released%3A%20update%20for%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1188589%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F194232%22%20target%3D%22_blank%22%3E%40Pedro%20Lopes%3C%2FA%3E%26nbsp%3Bany%20feedback%20on%20my%20question%20%3F%20%3A)%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1192061%22%20slang%3D%22en-US%22%3ERe%3A%20Released%3A%20update%20for%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1192061%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F378274%22%20target%3D%22_blank%22%3E%40TeunvdB%3C%2FA%3E%26nbsp%3Bare%20you%20using%20an%26nbsp%3Badmin%20account%20to%20run%20the%20tool%3F%20Check%20the%20logs%20under%20%25APPDATA%25%5CMicrosoft%5CKerberosConfigMgr%20and%20look%20for%20%E2%80%9CAttempting%20to%20remove%20SPN%20..%E2%80%9D%20and%20%E2%80%9CAttempting%20to%20add%20SPN...%E2%80%9C%20messages%2C%20what%20do%20you%20see%20there%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1230247%22%20slang%3D%22en-US%22%3ERe%3A%20Released%3A%20update%20for%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1230247%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F194232%22%20target%3D%22_blank%22%3E%40Pedro%20Lopes%3C%2FA%3E%26nbsp%3BSorry%20for%20the%20late%20reponse.%20We%20did%20this%20last%20Friday%20again.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E10-3-2020%2014%3A45%3A23%20Info%3A%20Attempting%20to%20fix%20SPN%20issue%3CBR%20%2F%3E10-3-2020%2014%3A45%3A23%20Info%3A%20Attempting%20to%20remove%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%20from%20account%20eu%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A23%20Info%3A%20Attempting%20to%20add%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%20for%20account%20eu%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A23%20Info%3A%20Attempting%20to%20add%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%20for%20account%20PACCAR-EU%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20SPNs%20appear%20to%20be%20assigned%20appropriately.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20Attempting%20to%20remove%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%3A1433%20from%20account%20eu%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20Attempting%20to%20add%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%3A1433%20for%20account%20eu%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20Attempting%20to%20add%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%3A1433%20for%20account%20PACCAR-EU%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20SPNs%20appear%20to%20be%20assigned%20appropriately.%3C%2FP%3E%3CP%3EAccording%20to%20SQL%20Server%20it%20is%20ok%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22SPNOK.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F177120i477A15D6DA45470D%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22SPNOK.png%22%20alt%3D%22SPNOK.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%20when%20i%20look%20in%20the%20tool%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22manager.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F177121i0A07F05A7B076D98%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22manager.png%22%20alt%3D%22manager.png%22%20%2F%3E%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3EIs%20this%20sufficient%20information%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%20Teun%20vd%20Biggelaar%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1230333%22%20slang%3D%22en-US%22%3ERe%3A%20Released%3A%20update%20for%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1230333%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F194232%22%20target%3D%22_blank%22%3E%40Pedro%20Lopes%3C%2FA%3E%26nbsp%3BSorry%20for%20the%20late%20reponse.%20We%20did%20this%20last%20Friday%20again.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E10-3-2020%2014%3A45%3A23%20Info%3A%20Attempting%20to%20fix%20SPN%20issue%3CBR%20%2F%3E10-3-2020%2014%3A45%3A23%20Info%3A%20Attempting%20to%20remove%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%20from%20account%20eu%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A23%20Info%3A%20Attempting%20to%20add%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%20for%20account%20eu%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A23%20Info%3A%20Attempting%20to%20add%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%20for%20account%20PACCAR-EU%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20SPNs%20appear%20to%20be%20assigned%20appropriately.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20Attempting%20to%20remove%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%3A1433%20from%20account%20eu%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20Attempting%20to%20add%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%3A1433%20for%20account%20eu%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20Attempting%20to%20add%20SPN%20MSSQLSvc%2FSERVERNAME.my.domain.com%3A1433%20for%20account%20PACCAR-EU%5CGMSAACCOUNT%24%20on%20domain%20my.domain.com%20.%3CBR%20%2F%3E10-3-2020%2014%3A45%3A24%20Info%3A%20SPNs%20appear%20to%20be%20assigned%20appropriately.%3C%2FP%3E%3CP%3EAccording%20to%20SQL%20Server%20it%20is%20ok%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22SPNOK.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F177120i477A15D6DA45470D%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22SPNOK.png%22%20alt%3D%22SPNOK.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%20when%20i%20look%20in%20the%20tool%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22manager.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F177121i0A07F05A7B076D98%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22manager.png%22%20alt%3D%22manager.png%22%20%2F%3E%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3EIs%20this%20sufficient%20information%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%20Teun%20vd%20Biggelaar%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Jan 17 2020 11:30 AM
Updated by: