Removal of ServicePrincipalNames on Account

Question

I have 3 user/service accounts with SPN's that I can't remove under user and computers/attribute editor, they are greyed out, I have full domain admin access also.

I've tried in AD, ADSIedit and using powershell.

e.g. Set-ADUser -Identity accountname -ServicePrincipalNames @{Remove='MSSQLSvc/servername.domainname.local:1433'}

Can anyone tell me why it might be greyed out and how to remove it. I've also had global/domain admins try.

Answer 1

Hi,

Have a look at this article on how to remove an SPN

Gary.