HRESULT 0x8009033B (SEC_E_TOO_MANY

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

The KDC reply contained more than one principal name.

Previous	Next
SEC_E_STRONG_CRYPTO_NOT_SUPPORTED	SEC_E_NO_PA_DATA

SEC_E_TOO_MANY_PRINCIPALS

SEC_E_TOO_MANY_PRINCIPALS signals this condition: The KDC reply identified more than one principal where a single principal was expected. The target identity is ambiguous. In Active Directory environments, duplicate or conflicting SPN registration is a common configuration to investigate when a service cannot be uniquely mapped to an account.

What to check

Query the exact SPN that the application uses and identify every directory object that owns it.
Review recent server renames, service-account changes, and stale directory records.
Fix only the confirmed duplicate after confirming which account actually runs the service.

setspn -Q HTTP/server.contoso.com

Microsoft: Configure SPNs

Microsoft: SSPI status codes

Looking for a different code? Search another status or error code.