get-spn syntax

Question

Hi all

i have created spn entries using the below syntax. is there any syntax like get-spn to validate if i have added correct entries rather than checking from AD attribute editor of the service account

setspn -s HTTPS/server01.contoso.com svc_serviceaccount

Answer 1

HI,
Thank you for posting in our forum. If you want to delete the following entries from powershell, you can post on the powershell forum, they can give you more professional help
reference:https://social.technet.microsoft.com/Forums/Windows/en-US/home?forum=winserverpowershell
Hope this information can help you
Best wishes
Vicky

Answer 2

the below syntax worked for me
Get-ADUser -identity svc_serviceaccount -properties ServicePrincipalNames |Select-Object -ExpandProperty ServicePrincipalNames

when i execute the above syntax i am getting the below output and now i want to remove the below entries from powershell how do i remove

HTTPS/server02.contos.com
HTTPS/server03.contos.com

Answer 3

Hi,

If you want check and validate if the SPN has been added correctly you can use the folllowing command:

setspn -F -Q Http/ServerName.domain.com

#or

setspn -L svcserviceaccount

For your information , there is no get-spn command and regarding the SPN , you have to use HTTP instead of HTTPS in SPN even for web server using SSL protocol.

Please don't forget to mark this reply as answer if it help you to fix your issue

Answer 4

Hi,
 
Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.
 
Best Regards,
Vicky