Event 11multiple accounts with name

[supportahm1980]

Hello I am receiving the following error on my domain controller. I have been reading all up about it yet do not have a clear understanding.

Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 11
Date: 4/23/2007
Time: 2:10:14 PM
User: N/A
Computer: DC
Description:
There are multiple accounts with name MSSQLSvc/SQL-01.foo.local:1433 of type DS_SERVICE_PRINCIPAL_NAME.

I've followed

http://support.microsoft.com/default.aspx?scid=kb;en-us;321044&sd=ee

and used the Ldifde utility.
Results:

dn: CN=SQL-01,OU=Servers,DC=foo,DC=local
changetype: add
servicePrincipalName: SMTPSVC/SQL-01
servicePrincipalName: SMTPSVC/SQL-01.foo.local
servicePrincipalName: MSSQLSvc/SQL-01.foo.local:1433
servicePrincipalName: HOST/SQL-01
servicePrincipalName: HOST/SQL-01.foo.local

dn: CN=SQL_user,CN=Users,DC=foo,DC=local
changetype: add
servicePrincipalName: HOST/SQL-01.foo.local
servicePrincipalName: MSSQLSvc/SQL-01.foo.local:1433
servicePrincipalName: HOST/SQL-01
servicePrincipalName: MSSQLSvc/SQL-01.foo.local

I am not sure which one to delete. Can anyone explain to me what they mean by duplicate.
Are these duplicate?
servicePrincipalName: HOST/SQL-01
servicePrincipalName: HOST/SQL-01.foo.local

Thanks a bunch if someone can give me some insight.

 

[pbxman]

Check your SQLSERVERAGENT and MSSQLSERVER services in control panel/administrative tools/services to make sure they're logging on with the correct account credentials.

pbxman
Systems Administrator

Please let Tek-Tips members know their posts were helpful.

 

[supportahm1980]

Yes everything looks ok. they are logging in with a domain user account, not the local system. Do you think that may be the cause?

 

[pbxman]

SQL should not run as the local system account, so that sounds ok. It still seems like there is something setup to use a different account than whatever domain user account is.
Use ADSIEdit to remove the "servicePrincipalName:" for the MSSQLSvc/SQL-01.foo.local entry per the article you posted. Then dis-join the server and join it to a workgroup, from another pc - delete the servers computer account from the domain and dns/wins, and then back at the server rejoin the server to the domain again, using the same computer name.

pbxman
Systems Administrator

Please let Tek-Tips members know their posts were helpful.