I like the way this is set up. The Baseline Security analyzer gets it wrong with the folder permissions. I started cleaning things up based on the BSL...

OK, I got what I was looking for. To list out the SPNs you have to do it under the account name that is creating the SPN. Which...

Thank you for your replys.

So to list out the current spns I should use

SETSPN -L against what server? My domain controler or my database server? If I run...

You can run a server side trace to look for DDL commands.

Here is my script that creates a new trace file. I have it set up in a job...

thanks to everyone for their responses.

Unfortunately the application they use and the positions they are in with in the organization requires them to also have delete rights. This...