setspn.exe Query or reset the computer's SPN attribute c5cd7861e2d9d287a3414ee6712842ad

  1. File Info
  2. MUI

File info

File name: setspn.exe.mui
Size: 12800 byte
MD5: c5cd7861e2d9d287a3414ee6712842ad
SHA1: d1913c47d0c551b032697c30732b9477abe073f6
SHA256: f35dab570c3f157d667fb1f1a30d1318272f885d67448a3ae155f233d903970a
Operating systems: Windows 10
Extension: MUI
In x64: setspn.exe Query or reset the computer's SPN attribute (32-bit)

Translations messages and strings

If an error occurred or the following message in English (U.S.) language and you cannot find a solution, than check answer in English. Table below helps to know how correctly this phrase sounds in English.

id English (U.S.) English
10000Usage: %ws [modifiers switch] [accountname]
Where "accountname" can be the name or domain
ame
of the target computer or user account

Edit Mode Switches:
-R = reset HOST ServicePrincipalName
Usage: setspn -R accountname
-S = add arbitrary SPN after verifying no duplicates exist
Usage: setspn -S SPN accountname
-D = delete arbitrary SPN
Usage: setspn -D SPN accountname
-L = list SPNs registered to target account
Usage: setspn [-L] accountname

Edit Mode Modifiers:
-C = specify that accountname is a computer account
-U = specify that accountname is a user account

Note: -C and -U are exclusive. If neither is specified, the tool
will interpret accountname as a computer name if such a computer
exists, and a user name if it does not.

Query Mode Switches:
-Q = query for existence of SPN
Usage: setspn -Q SPN
-X = search for duplicate SPNs
Usage: setspn -X

Note: searching for duplicates, especially forestwide, can take
a long period of time and a large amount of memory. -Q will execute
on each target domain/forest. -X will return duplicates that exist
across all targets. SPNs are not required to be unique across forests,
but duplicates can cause authentication issues when authenticating
cross-forest.

Query Mode Modifiers:
-P = suppresses progress to the console and can be used when redirecting
output to a file or when used in an unattended script. There will be no
output until the command is complete.
-F = perform queries at the forest, rather than domain level
-T = perform query on the speicified domain or forest (when -F is also used)
Usage: setspn -T domain (switches and other parameters)
"" or * can be used to indicate the current domain or forest.

Note: these modifiers can be used with the -S switch in order to specify
where the check for duplicates should be performed before adding the SPN.
Note: -T can be specified multiple times.
Usage: %ws [modifiers switch] [accountname]
Where "accountname" can be the name or domain
ame
of the target computer or user account

Edit Mode Switches:
-R = reset HOST ServicePrincipalName
Usage: setspn -R accountname
-S = add arbitrary SPN after verifying no duplicates exist
Usage: setspn -S SPN accountname
-D = delete arbitrary SPN
Usage: setspn -D SPN accountname
-L = list SPNs registered to target account
Usage: setspn [-L] accountname

Edit Mode Modifiers:
-C = specify that accountname is a computer account
-U = specify that accountname is a user account

Note: -C and -U are exclusive. If neither is specified, the tool
will interpret accountname as a computer name if such a computer
exists, and a user name if it does not.

Query Mode Switches:
-Q = query for existence of SPN
Usage: setspn -Q SPN
-X = search for duplicate SPNs
Usage: setspn -X

Note: searching for duplicates, especially forestwide, can take
a long period of time and a large amount of memory. -Q will execute
on each target domain/forest. -X will return duplicates that exist
across all targets. SPNs are not required to be unique across forests,
but duplicates can cause authentication issues when authenticating
cross-forest.

Query Mode Modifiers:
-P = suppresses progress to the console and can be used when redirecting
output to a file or when used in an unattended script. There will be no
output until the command is complete.
-F = perform queries at the forest, rather than domain level
-T = perform query on the speicified domain or forest (when -F is also used)
Usage: setspn -T domain (switches and other parameters)
"" or * can be used to indicate the current domain or forest.

Note: these modifiers can be used with the -S switch in order to specify
where the check for duplicates should be performed before adding the SPN.
Note: -T can be specified multiple times.
10001
Examples:
setspn -R daserver1
It will register SPN "HOST/daserver1" and "HOST/{DNS of daserver1}"
setspn -S http/daserver daserver1
It will register SPN "http/daserver" for computer "daserver1"
if no such SPN exists in the domain
setspn -D http/daserver daserver1
It will delete SPN "http/daserver" for computer "daserver1"
setspn -F -S http/daserver daserver1
It will register SPN "http/daserver" for computer "daserver1"
if no such SPN exists in the forest
setspn -U -S http/daserver dauser
It will register SPN "http/daserver" for user account "dauser"
if no such SPN exists in the domain
setspn -T * -T bar -X
It will report all duplicate registration of SPNs in this domain and bar
setspn -T bar -F -Q */daserver
It will find all SPNs of the form */daserver registered in the forest to
which bar belongs

Examples:
setspn -R daserver1
It will register SPN "HOST/daserver1" and "HOST/{DNS of daserver1}"
setspn -S http/daserver daserver1
It will register SPN "http/daserver" for computer "daserver1"
if no such SPN exists in the domain
setspn -D http/daserver daserver1
It will delete SPN "http/daserver" for computer "daserver1"
setspn -F -S http/daserver daserver1
It will register SPN "http/daserver" for computer "daserver1"
if no such SPN exists in the forest
setspn -U -S http/daserver dauser
It will register SPN "http/daserver" for user account "dauser"
if no such SPN exists in the domain
setspn -T * -T bar -X
It will report all duplicate registration of SPNs in this domain and bar
setspn -T bar -F -Q */daserver
It will find all SPNs of the form */daserver registered in the forest to
which bar belongs
10002%ws is registered on these accounts:
%ws is registered on these accounts:
10003Error(%#x): Error(%#x):
10004Ldap Error(%#x -- %ws): Ldap Error(%#x -- %ws):
10005unknown unknown
10006Error getting system path 0x%x Error getting system path 0x%x
10007%ws: Server name too long
%ws: Server name too long
10008failed failed
10009%ws: Domain name too short
%ws: Domain name too short
10010%ws: DC name too short
%ws: DC name too short
10011Could not find account %ws
Could not find account %ws
10012%ws: DsGetDcNameWithAccountW failed!
%ws: DsGetDcNameWithAccountW failed!
10013%ws: AccountName too short
%ws: AccountName too short
10014Failed to bind to DC of domain %ws, error %ws
Failed to bind to DC of domain %ws, error %ws
10015Failed to crack name %ws into the FQDN. DS_NAME_RESULT items: %d %ws
Failed to crack name %ws into the FQDN. DS_NAME_RESULT items: %d %ws
10016%ws: HostSpn too short
%ws: HostSpn too short
10017%ws: FlatSpn too short
%ws: FlatSpn too short
10019%ws
%ws
10021Unable to locate account %ws
Unable to locate account %ws
10022Error occurred when searching for existing SPN: 0x%08x
Error occurred when searching for existing SPN: 0x%08x
10023Duplicate SPN found, aborting operation!
Duplicate SPN found, aborting operation!
10024Registering ServicePrincipalNames for %ws
Registering ServicePrincipalNames for %ws
10025Unregistering ServicePrincipalNames for %ws
Unregistering ServicePrincipalNames for %ws
10026Failed to assign SPN on account '%ws', error %ws
Failed to assign SPN on account '%ws', error %ws
10027Failed to remove SPN on account '%ws', error %ws
Failed to remove SPN on account '%ws', error %ws
10028Requested name '%ws' not found in directory.
Requested name '%ws' not found in directory.
10029Registered ServicePrincipalNames Registered ServicePrincipalNames
10030for %ws for %ws
10031Existing SPN found!
Existing SPN found!
10032No such SPN found.
No such SPN found.
10033Updated object
Updated object
10034Invalid SPN %ws

Invalid SPN %ws

10035Operation will be performed forestwide, it might take a while.
Operation will be performed forestwide, it might take a while.
10036calloc (%ld bytes) failed. calloc (%ld bytes) failed.
10037Found an ill-formatted SPN:%ws. ignored. Found an ill-formatted SPN:%ws. ignored.
10038found %ld %ws of duplicate SPNs.

found %ld %ws of duplicate SPNs.

10039group group
10040groups groups
10041entry entry
10042entries entries
10043Invalid parameter Found. Invalid parameter Found.
10044don't know what to search for. don't know what to search for.
10045%ld %ws returned from the query.

%ld %ws returned from the query.

10046%ws is internally mapped to host/%ws. Please query host/%ws
%ws is internally mapped to host/%ws. Please query host/%ws
10047Processing entry %d Processing entry %d
10048
Currently processing domain "%ws"

Currently processing domain "%ws"
10049
Currently processing forest "%ws"

Currently processing forest "%ws"
10050%ws: Server name is empty
%ws: Server name is empty
10051%ws: Call to %ws failed with return value 0x%08X
%ws: Call to %ws failed with return value 0x%08X
10052Too many targets specified. Ignoring "%ws"
Too many targets specified. Ignoring "%ws"
10053Unknown parameter %ws. Please check your usage.

Unknown parameter %ws. Please check your usage.

10054-U and -C are only valid with -L, -R, -S, and -D.

-U and -C are only valid with -L, -R, -S, and -D.

10055-F and -T are only valid with -Q, -X, and -S.

-F and -T are only valid with -Q, -X, and -S.

10056Missing parameter: accountname.

Missing parameter: accountname.

10057Duplicate domain specified "%ws" : %ws
Duplicate domain specified "%ws" : %ws
10058Duplicate forest specified "%ws" : %ws
Duplicate forest specified "%ws" : %ws
10059Checking domain %ws
Checking domain %ws
10060Checking forest %ws
Checking forest %ws
10061Failed to retrieve DN for domain "%ws" : 0x%08X
Failed to retrieve DN for domain "%ws" : 0x%08X
10062Failed to retrieve DN for forest "%ws" : 0x%08X
Failed to retrieve DN for forest "%ws" : 0x%08X
10063Warning: No valid targets specified, reverting to current domain.
Warning: No valid targets specified, reverting to current domain.
10064Warning: No valid targets specified, reverting to current forest.
Warning: No valid targets specified, reverting to current forest.
10065Unknown action.
Unknown action.

EXIF

File Name:setspn.exe.mui
Directory:%WINDIR%\WinSxS\amd64_microsoft-windows-s..ls-setspn.resources_31bf3856ad364e35_10.0.15063.0_en-us_62d3dcbc86d94023\
File Size:12 kB
File Permissions:rw-rw-rw-
File Type:Win32 DLL
File Type Extension:dll
MIME Type:application/octet-stream
Machine Type:Intel 386 or later, and compatibles
Time Stamp:0000:00:00 00:00:00
PE Type:PE32
Linker Version:14.10
Code Size:0
Initialized Data Size:12288
Uninitialized Data Size:0
Entry Point:0x0000
OS Version:10.0
Image Version:10.0
Subsystem Version:6.0
Subsystem:Windows GUI
File Version Number:10.0.15063.0
Product Version Number:10.0.15063.0
File Flags Mask:0x003f
File Flags:(none)
File OS:Windows NT 32-bit
Object File Type:Executable application
File Subtype:0
Language Code:English (U.S.)
Character Set:Unicode
Company Name:Microsoft Corporation
File Description:Query or reset the computer's SPN attribute
File Version:10.0.15063.0 (WinBuild.160101.0800)
Internal Name:setspn
Legal Copyright:© Microsoft Corporation. All rights reserved.
Original File Name:setspn.exe.mui
Product Name:Microsoft® Windows® Operating System
Product Version:10.0.15063.0

What is setspn.exe.mui?

setspn.exe.mui is Multilingual User Interface resource file that contain English (U.S.) language for file setspn.exe (Query or reset the computer's SPN attribute).

File version info

File Description:Query or reset the computer's SPN attribute
File Version:10.0.15063.0 (WinBuild.160101.0800)
Company Name:Microsoft Corporation
Internal Name:setspn
Legal Copyright:© Microsoft Corporation. All rights reserved.
Original Filename:setspn.exe.mui
Product Name:Microsoft® Windows® Operating System
Product Version:10.0.15063.0
Translation:0x409, 1200