Service Principal Name Configuration Status – SQL Server cannot authenticate using Kerberos

Marnix did a post on this a while back, but I wanted to supplement what he wrote with some additional information.

If your SQL Service account exists in another domain, this monitor will not work because line 597 of the data source script queries LDAP instead of GC.

Set oRootDse = GetObject(“LDAP://RootDSE”) should be Set oRootDse = GetObject(“GC://RootDSE”)

If you are affected by this issue, you’ll need to fix the script – which means rewriting the monitor.

5 thoughts on “Service Principal Name Configuration Status – SQL Server cannot authenticate using Kerberos”

Leave a Reply to Blake Cancel reply