Installing the SetSPN utility on a domain controller
The setspn.exe tool is used to create service principal names which are used in the Kerberos authentication process. It authorizes a Windows domain user to make authentication requests to the Active Directory Domain Controller on behalf of a service.
The setspn.exe utility is part of the Windows Support Tools package. These tools are available from the Microsoft website or the Windows Server Install CD. On the install CD, the Suptools.msi file can be found in the Support\Tools\ directory.
After installing the setspn.exe tool, execute it on the domain controller within DOMAIN.EXT. This will allow the service user (in this example, nexjsvr) to make authentication requests to the Active Directory Domain Controller on behalf of the NexJ application.