Manage SPNs for the PI AF application service

The setspn command line tool allows a user with appropriate permissions to view, edit and delete the Service Principal Names (SPN) property associated with Active Directory objects. Generally, a domain administrator manages SPNs.

Note: If your PI AF application service and/or SQL Server service are running under the local Network Service account or a Virtual Account for the Network Service (such as those used by default in SQL Server or the default account used for the PI AF application service), then you can skip this section.

The setspn tool can be used to verify that the correct SPNs have been created for the PI AF application service, whether it is running under the NT SERVICE\AFService account, the NT SERVICE\NetworkService account, or a domain account. It can also be used to create or delete SPNs for the PI AF application service, which is only necessary if the account under which the service is running does not have the permissions to read and write SPNs.