Duplicate SPN for user accounts

Question

Hi Support,
I get an error on the system log like the below - but is bringing up a user account rather tham for a computer account; for duplicate SPN:
The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is username. (of type -17). This may result in authentication failures or downgrades to NTLM. In order to prevent this from occuring remove the duplicate
entries for username in Active Directory.
Steps in the article KB321044 is for computer accounts and not for user accounts; is there any relevant steps for user accounts having duplicate SPNS ?
Thanks,
Arun

Answer 1

I've followed the above steps and does not seem to resolve my issue and the below error on system log repeats:
Log Name: System
Source: Microsoft-Windows-Kerberos-Key-Distribution-Center
Date: 20/08/2014 10:29:49
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: xxxxxxx.xxxxxxx.internal
Description:
The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is [email protected] (of type -17). This may result in authentication failures or downgrades to NTLM. In order to prevent this from occuring remove the duplicate entries for [email protected] in Active Directory.
* Setspn -x command on Server does not list any duplicate SPNs
* Followed http://support.microsoft.com/kb/321044 , but output does not give any duplicate SPNs
* Referred this article and SPN shows only one value and no duplicates:
http://blogs.technet.com/b/qzaidi/archive/2010/10/12/quickly-explained-service-principal-name-registration-duplication.aspx
* Tried re-registering SPN for the account sphilpot as per this article - which :
http://msdn.microsoft.com/en-IN/library/ms191153.aspx#Manual
Not sure this will fix the issue.
{ Noticed Disk error on System event log noticed: " The driver detected a controller error on
\Device\Harddisk1\DR1 "
For which asked to remove/format the Expansion S drive and test }