question

RobC-3771 avatar image
0 Votes"
RobC-3771 asked GaryReynolds commented

Removal of ServicePrincipalNames on Account

I have 3 user/service accounts with SPN's that I can't remove under user and computers/attribute editor, they are greyed out, I have full domain admin access also.

I've tried in AD, ADSIedit and using powershell.

e.g. Set-ADUser -Identity accountname -ServicePrincipalNames @{Remove='MSSQLSvc/servername.domainname.local:1433'}

Can anyone tell me why it might be greyed out and how to remove it. I've also had global/domain admins try.


windows-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

GaryReynolds avatar image
0 Votes"
GaryReynolds answered

Hi,

Have a look at this article on how to remove an SPN

Gary.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.