Delegation tab of the SQL service account in AD is missing.
1- Run setspn –A MSSQLSvc/<FQDN> <SQL_Service_Account> Note YOU MUST USE THE FQDN.
2- Run setspn –A MSSQLSvc/<FQDN>:1433> <SQL_Service_Account> Note YOU MUST USE THE FQDN
Example:
setspn -A MSSQLSvc/SQLServerName.company.com:1433 YourDomain\YourSQLAccount
Note: 1433 is the Default SQL port, it migth be different in your environment
3- Run setspn –L <SQL_Service_Account> validate that “servicePrincipalName:” has been set like you expect. There will be two entries.
4- Open ADUC and go to the properties of the SQL Service Account. Open the delegation TAB and set this to Trust this user for delegation to any service. If the delegation tab is missing, the setspn was not set properly.
© 2025 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center