diff --git a/services/univention-samba4/scripts/create_spn_account.sh b/services/univention-samba4/scripts/create_spn_account.sh
index b416956636..b510887793 100755
--- a/services/univention-samba4/scripts/create_spn_account.sh
+++ b/services/univention-samba4/scripts/create_spn_account.sh
@@ -136,6 +136,9 @@ create_spn_account() {
 		changetype: modify
 		replace: servicePrincipalName
 		servicePrincipalName: $servicePrincipalName
+		-
+		replace: msDS-SupportedEncryptionTypes
+		msDS-SupportedEncryptionTypes: 31
 		%EOF
 	else
 		echo -n "Setting new password for $spn_account_name account: "