setspn

Microsoft's setspn command-line utility reads, queries, modifies, and deletes Service Principal Name (SPN) values on Active Directory service accounts. SPNs identify principals associated with network services. The utility can list an account's SPNs, query matching SPNs, find duplicates, reset a computer account's defaults, and add or remove entries. Microsoft documents the utility as available when the Active Directory Domain Services server role is installed.