Your network contains an Active Directory domain named contoso.com.
The domain contains a web application that uses Kerberos authentication.
You change the domain name of the web application.
You need to ensure that the service principal name (SPN) for the application is registered.
Which tool should you use?
A. Rdspnf
B. Active Directory Users and Computers
C. Dnscmd
D. Ldifde
11There are three tools which you usually uses to list or even manipulate Service Principal Names (SPN) for an AD object.
i) Active Directory Users and Computers “Advanced” view
ii) setspn.exe -L command
iii) Ldifde.exe command
Ldifde -d “CN=WebServer, CN=Computers, DC=Contoso,DC=Com” -l ServicePrincipalName -F C:\SPN.txt
https://social.technet.microsoft.com/wiki/contents/articles/18996.active-directory-powershell-script-to-list-all-spns-used.aspx