When using SetSPN.aspx, you have to view the page on the IIS Server. To explain my setup a little bit better I have the following configuration for my Web Application. After you download the Setspn utility, follow these steps. Note You must be a member of the Domain Administrators group to run the Setspn command. Access Management and Identity Federation on a plate. You may recall a previous post from a few weeks back, concerning customization of AD FS Relying Parties in. patterns & practices Developer Center. J.D. Meier, Alex Mackman, Blaine Wastell, Prashant Bansode, Andy Wigley, Kishore Gopalan. Microsoft Corporation Open the registry (regedit) and navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\vd3v; Increase the value of “MaxVideoMemoryBytes” REG_DWORD. This guide provides instructions for setting up a small test lab with Active Directory® Federation Services (AD FS) 2.0 and Windows Identity Foundation. Hi all, Rob here again. I had a case recently where the customer wanted to have the Windows Server 2008 Certificate Authority website loaded on another. Back story. Hi, please bear with me on this long blog post. There is lots to explain and the topic is not a easy one. In the last 3 months my team and I struggled. Another time that you may need to configure SPNs through the use of SetSPN is when using Kerberos to connect to a web application. In many cases, web applications. Kerberos is a secure protocol that supports ticketing authentication. A Kerberos authentication server grants a ticket in response to a client computer.