how to identify if kerberos is being used?

• winston Smith

  SSCoach

  Points: 19489

  More actions

  October 2, 2011 at 8:59 am

  #390525

  How do i identify if kerberos is being used?

  I have read online that i can check for some events on the security logs on the Domain Controller, but is there anything i can do on:

  1. My client machine that connects to sql server on a different server.

  2. From the sql server machine.

  Thanks!

• KumarVelayutham

  SSCrazy

  Points: 2204

  More actions

  October 3, 2011 at 7:20 am

  #1389494

  Hi,

  You can check kerberos is being used or not by running below query

  USE MASTER

  GO

  SELECT AUTH_SCHEME FROM SYS.DM_EXEC_SESSIONS

  If output will be kerberos ,log on process is by kerberos authentication.

  or by

  Start->Run->gpedit.msc->Computer Configuration, Windows Settings, Security Settings, Local Policies, Audit Policy, "Audit logon events".

  Check the "Success" and "Failure" check boxes. Try logging out and logging in to see some typical 540 events in your Windows Security Event Log.

  From the event log information,we can able to find the logon process by kerberos or not.

  Regards

  http:\\SQLdbataskwithkumar.blogspot.com

  Regards,
  Kumar