List SPNs in Active Directory using PowerShell

How to list SPNs in Active Directory using PowerShell. A Service Principal Name (SPN) is a service name that is registered in Active Directory, and is associated with a computer or user account (the security context in which the service runs).  The standard AD tools don't give you a good way to figure out where an SPN is registered, or list what SPNs are registered in your AD.


-->
To locate a specific SPN, check out our posts Finding an SPN in Active Directory using Perl and Finding an SPN in Active Directory using VBScript.

The PowerShell script below finds all SPNs in your domain of the service type that you specify.  In the example below, I have the service type set to "HTTP", so the script returns all of the HTTP/ SPNs.  The script uses the directorySearcher .Net class to find the accounts with HTTP/ SPNs.

$serviceType="HTTP"

$spns = @{}

$filter = "(servicePrincipalName=$serviceType/*)"
$domain = New-Object System.DirectoryServices.DirectoryEntry
$searcher = New-Object System.DirectoryServices.DirectorySearcher
$searcher.SearchRoot = $domain
$searcher.PageSize = 1000
$searcher.Filter = $filter
$results = $searcher.FindAll()

foreach ($result in $results){
 $account = $result.GetDirectoryEntry()
 foreach ($spn in $account.servicePrincipalName.Value){
  if($spn.contains("$serviceType/")){
   $spns[$("$spn`t$($account.samAccountName)")]=1;
  }
 }
}

$spns.keys | sort-object

Related Posts:

• Backup DFS Namespaces Using PowerShell
• Translate Active Directory Name Formats Using PowerShell
• List Linux Users in Active Directory Using PowerShell
• Enable Trust for Delegation in Active Directory Using PowerShell
• TCP/IP Subnet Math with PowerShell - What AD Site is that Server in?
• List Sites and Subnets in Active Directory with PowerShell
• Find Disabled Users in Active Directory with PowerShell
• List Forest-wide Group Memberships with PowerShell
• Find Old Computer Accounts in AD with PowerShell
• List SPNs in Active Directory with PowerShell
• List Domain Controllers in Active Directory