| Event Id | 9317 |
| Source | cdoexm |
| Description | Failed to register Service Principal Name for <service name>; error code was <error code>. |
| Event Information | Explanation : This event is indicating a failure to register SPN (service principal name). This may prevent Outlook/Outlook Web Access clients, running in a Kerberos-only network, to get authenticated and log on their mailboxes. SPN gives a service running on a particular machine a global identity that allows it to authenticate via Kerberos. Exchange System Attendant is responsible for the SPN registrations of Exchange services. User Action : SPNs are used by clients such as Outlook to authenticate with the server. Verify that Outlook clients are able to log on and read mail; if they cannot log on and read mail, try to restart MSExchangeSA. If that does not work, contact Microsoft Product Support Services. Users can also work around this problem by using a Windows utility called "setspn" that allows manual registration of SPNs on a machine. Exchange only registers "exchangeRFR" and "exchangeMDB" SPNs, which are used for Outlook authentication. By default, only domain administrators and local system can register SPNs. In some cases, Exchange administrators do not have any domain administrator rights, therefore they have to ask the domain administrator to run setspn. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.