We are seeing an issue with SQL Linked Servers and Windows 11. Kerberos doesn't seem to be passing credentials

Thomas McKane 5 Reputation points
2023-07-11T19:30:02.36+00:00

All of our existing Windows 10 computers work fine, but the newer Windows 11 computers throw the anonymous error on the linked server. Kerberos is configured correctly along with SPN's. We can't seem to figure out why Windows 11 can't do a double hop using Kerberos.

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
13,948 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
9,847 questions
{count} votes

3 answers

Sort by: Most helpful
  1. Thomas McKane 5 Reputation points
    2023-07-13T23:27:44.51+00:00
    1 person found this answer helpful.

  2. Nick B 361 Reputation points
    2023-07-12T00:07:19.23+00:00

    Go to group policy and select LDAP for signing none in security settings then try go around RPC to authenticate everything and finally kerberos armoring check in group policy with KDC. Try disabling group policy computer configuration and user configuration and restart computer to try again. Check component connection.


  3. AniyaTang-MSFT 12,446 Reputation points Microsoft Vendor
    2023-07-12T02:24:11.9733333+00:00

    Hi @Thomas McKane

    Welcome to Microsoft Q&A!

    Please refer to the links below:

    https://www.sqlshack.com/how-to-link-two-sql-server-instances-with-kerberos/

    https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/register-a-service-principal-name-for-kerberos-connections?view=sql-server-ver16

    Hope these would bring your attention to some points you hadn't noticed before.

    To be honest, since we can’t check the status of your server in the forum, this type of issue is usually difficult to resolve. I suggest you consider using the phone support service provided by Microsoft which can usually help you resolve your issue.
    https://support.microsoft.com/en-us/help/4051701/global-customer-service-phone-numbers
    https://support.microsoft.com/en-us/supportforbusiness/productselection

    Best regards,

    Aniya


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.