I’m putting this here, as I keep needing it!
To have SQL Server use Kerberos configuration, you need to set up two SPNs for the SQL Server Account:
setspn.exe MSSQLSvc/{NETBIOS NAME OF SQL SERVER}:{PORT NO} {SQL SERVER SERVICE ACCOUNT}
setspn.exe MSSQLSvc/{FQDN NAME OF SQL SERVER}:{PORT NO} {SQL SERVER SERVICE ACCOUNT}
Make sure that the SQL Server Service account is delegated for Kerberos in AD and so is the SQL Server itself.
Then in SSMS run the following:
SELECT auth_scheme FROM sys.dm_exec_connections WHERE session_id=@@spid
Should say ‘KERBEROS’.
Cheers
Dave Mc






Leave a comment