Fix SPN registration issue for Windows return code: 0x21c7, state: 15.

 

Symptoms:

The SQL Server Network Interface library could not register the Service Principal Name (SPN) [ MSSQLSvc/VMMSQL01.dbaglobe.com:1433 ] for the SQL Server service. Windows return code: 0x21c7, state: 15.

 

Table: UPN and SPN uniqueness error codes

The attribute value provided is not unique in the forest or partition. Attribute: servicePrincipalName Value=MSSQLSvc/VMMSQL01.dbaglobe.com
CN=VMMSQL01,OU=SQLServers,DC=dbaglobe,DC=com
Value=MSSQLSvc/VMMSQL01.dbaglobe.com
CN=VMMSQL01,OU=SQLServers,DC=dbaglobe,DC=com Winerror: 8647
See http://go.microsoft.com/fwlink/?LinkID=279782 for more details on this policy.

 

How to Troubleshoot:

C:\Users\Administrator>dsquery * -filter servicePrincipalName=*
"CN=VMMAD01,OU=Domain Controllers,DC=dbaglobe,DC=com"
"CN=VMMSQL01,CN=Computers,DC=dbaglobe,DC=com"
"CN=VMMSQL02,CN=Computers,DC=dbaglobe,DC=com"
"CN=krbtgt,CN=Users,DC=dbaglobe,DC=com"
"CN=sqlsvcs,CN=Users,DC=dbaglobe,DC=com"

C:\Users\Administrator>setspn -l VMMSQL01
Registered ServicePrincipalNames for CN=VMMSQL01,CN=Computers,DC=dbaglobe,DC=com:
        MSSQLSvc/VMMSQL01.dbaglobe.com:1433
        MSSQLSvc/VMMSQL01.dbaglobe.com
        WSMAN/VMMSQL01
        WSMAN/VMMSQL01.dbaglobe.com
        RestrictedKrbHost/VMMSQL01
        HOST/VMMSQL01
        RestrictedKrbHost/VMMSQL01.dbaglobe.com
        HOST/VMMSQL01.dbaglobe.com

C:\Users\Administrator>setspn -D MSSQLSvc/VMMSQL01.dbaglobe.com:1433 VMMSQL01
Unregistering ServicePrincipalNames for CN=VMMSQL01,CN=Computers,DC=dbaglobe,DC=com
        MSSQLSvc/VMMSQL01.dbaglobe.com:1433
Updated object

C:\Users\Administrator>setspn -D MSSQLSvc/VMMSQL01.dbaglobe.com VMMSQL01
Unregistering ServicePrincipalNames for CN=VMMSQL01,CN=Computers,DC=dbaglobe,DC=com
        MSSQLSvc/VMMSQL01.dbaglobe.com
Updated object

C:\Users\Administrator>setspn -l VMMSQL01
Registered ServicePrincipalNames for CN=VMMSQL01,CN=Computers,DC=dbaglobe,DC=com:
        WSMAN/VMMSQL01
        WSMAN/VMMSQL01.dbaglobe.com
        RestrictedKrbHost/VMMSQL01
        HOST/VMMSQL01
        RestrictedKrbHost/VMMSQL01.dbaglobe.com
        HOST/VMMSQL01.dbaglobe.com

Reference:

https://technet.microsoft.com/en-us/library/dn535779.aspx

http://blogs.technet.com/b/mdegre/archive/2009/11/20/the-sql-network-interface-library-was-unable-to-register-spn.aspx

https://social.technet.microsoft.com/Forums/systemcenter/en-US/aa0a8ad4-3598-4c01-ab7d-9c49c19071d4/2012r2-dc-ad-lds-service-principal-names-duplicates