Removal of ServicePrincipalNames on Account

Question

Removal of ServicePrincipalNames on Account

RobC 36

I have 3 user/service accounts with SPN's that I can't remove under user and computers/attribute editor, they are greyed out, I have full domain admin access also.

I've tried in AD, ADSIedit and using powershell.

e.g. Set-ADUser -Identity accountname -ServicePrincipalNames @{Remove='MSSQLSvc/servername.domainname.local:1433'}

Can anyone tell me why it might be greyed out and how to remove it. I've also had global/domain admins try.

ngan 0 Reputation points

2025-05-05T08:16:54.5133333+00:00

Hi

you can try to create another account and add it to domain admins group, logon using this new create account and open cmd run as administrator and run your delete spn command to test

1 answer

Your answer

ngan 0 Reputation points

2025-05-05T08:16:54.5133333+00:00

Hi

you can try to create another account and add it to domain admins group, logon using this new create account and open cmd run as administrator and run your delete spn command to test

Answer 1

Gary Reynolds 9,621

Hi,

Have a look at this article on how to remove an SPN

Gary.

Share via

Removal of ServicePrincipalNames on Account

1 answer

Your answer