By using our site, you acknowledge that you have read and understand our Cookie Policy , Privacy Policy , and our Terms of Service. This is required for SSPI to work. Keep up to date – daily newsletter:. Good practice for service accounts is to give them the least privileges possible. You can’t delete your own posts. HY ] Error 0: Your feedback will help us improve the support experience.

Uploader: Mujinn
Date Added: 5 September 2014
File Size: 5.28 Mb
Operating Systems: Windows NT/2000/XP/2003/2003/7/8/10 MacOS 10/X
Downloads: 35199
Price: Free* [*Free Regsitration Required]

Many thanks, Kindest Regards, Nick You can also have multiple web service instances on the same physical computer that has a unique SPN. Bosna i Hercegovina – Hrvatski.

Fixing error: “Cannot generate SSPI context” after changing SQL service account

By using our site, you acknowledge that you have read and understand our Cookie PolicyPrivacy Policyand our Terms of Service. Verify the domain Verify that the domain to which you log on can communicate with the domain to which the computer that is running SQL Server belongs. But it doesn’t help me, because they’re working fine until yesterday. I’ve been tearing my hair out for an hour trying to get the most basic.

Check whether the domain that the server belongs to and the domain account that canbot use to connect are in the same forest. Windows domain administrator accounts or Windows Server domain administrator accounts can use the utility to control the SPN that is assigned to a service and an account.


sql server – Error: Cannot Generate SSPI context – Database Administrators Stack Exchange

Usually my first port of call with this error is to check whether the users password has expired, account locked out or just out of touch with the domain controller. Set the group policy from the server itself to automatically change the time for the users. Marco 3, 3 15 HY ] Error 0: Many thanks, Kindest Regards, Nick. You can’t post IFCode. There must also be correct name resolution in the domain.

A good thing to see to get more context is youtube. You can’t post topic replies. You can’t post replies to polls.

By clicking “Post Your Answer”, you acknowledge that you have read our updated terms of serviceprivacy policy and cookie policyand that your continued use of the website is subject to these policies. The script will need to be run by someone with Domain Admin permissions.

El barto Posted 9 years ago On the File menu, click Save.


ODBC SQLState HY Cannot generate SSPI context

On the Security tab, click Advanced. I’ve had this problem sorted by forcing a time reset from the server, all machines in the group policy span will go back to server time and then error its gone Hope it helps someone. You can’t delete your own topics.

Ping the desired server and see what reply you get. It’s a bit more involved than newer versions. There are 3 ways to fix the problem: I don’t want to change anything. If you test by using a domain administrator account as the SQL Server service account, the SPN is successfully created because the domain administrator-level credentials that you must have to create an SPN are present.

You are using Integrated Security. However, this hotfix is intended to correct only the problem that is described in this article. The error still occurs when a A new job is created b When the user running the job is changed.

Post as a guest Name. You can’t delete other topics.