blogging about…… Microsoft, Cloud Computing
To see all the service principal names registered in your domain, execute the following command:
ldifde -f <FileName> -s <DomainController> -t 3268 -d dc=forest,dc=root -r
"(objectclass=computer)" -l servicePrincipalname
this will return all computerobjects with an SPN and place it in the file <filename>. For all users execute the following:
ldifde -f <FileName> -s <DomainController> -t 3268 -d dc=forest,dc=root -r
"(objectclass=user)" -l servicePrincipalname
In this command replace forest with your NetBIOS domain name (i.e. marcvalk), root with your top level domain (i.e. net)