Questions tagged [delegation]

137 questions
3
votes
3 answers

End-User AD Management solution

We've just migrated to a pure Microsoft environment and are looking for an end-user AD management solution. Ideally we'd like users to be able to manage their personal info in AD. We have ~500 users in our domain. I've found a few products from…
LukeR
  • 3,086
  • 2
  • 29
  • 25
3
votes
1 answer

SPNs and Kerberos Delegation

I would like to check my understanding. This is a fully hypothetical scenario below as I am currently studying for a certification. I have an IIS App Pool with a basic website, which accesses data from a SQL Backend. I want to setup Kerberos…
PnP
  • 1,684
  • 8
  • 37
  • 65
3
votes
2 answers

Limiting view of Active Directory Users and Computers

I am delegating a group of users to a specific person to be able to keep up with thier account management, and I have delegated them the authority to do this to just this group. Is there a way that I can also restrict that same person from viewing…
3
votes
1 answer

How do I avoid Lame DNS or other issues when switching between 3rd party DNS servers?

I have 800 DNS zones at many different providers, and am trying to centralize them to either UltraDNS or Dynect. Is is possible for me to configure each NS to nameserverX.MyCompany.com and avoid having to make 800 edits every time a new DNS server…
makerofthings7
  • 8,821
  • 28
  • 115
  • 196
2
votes
2 answers

Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)

Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to the domain" right was assigned to a…
2
votes
3 answers

Can't Promote Server to Secondary Domain Controller

We have a server running Server 2008 R2 as our primary DC. We currently don't have a secondary DC, but are trying to add one. The secondary DC we are trying to use is running Server 2012 R2 Standard. The Issue: When we try to promote the second…
2
votes
3 answers

"Permission Denied" creating a new domain-based Dfs root as non-Administrator

I have been tasked to delegate a number of everyday tasks in our domain to a group of technicians which does not have Domain Admins membership. One of these tasks is the creation of new domain-based Dfs roots (Server 2008 R2 Enterprise DCs). And…
the-wabbit
  • 40,319
  • 13
  • 105
  • 169
2
votes
1 answer

With DNS, what is the difference between Delegation, Forwarding, Conditional Forwarding, and Stub zones?

I am surprised at how many different ways I have read answers to this question and I still don't know the fine differences of the answer. For each of these similar DNS concepts: Delegation Forwarding Conditional Forwarding Stub Zones I would like…
Watki02
  • 537
  • 2
  • 12
  • 21
2
votes
1 answer

If I authorize someone to send as me though Exchange Online will I see the sent emails?

Lets assume I am the owner of the mailbox "george@example.com" and via the Exchange Online administration I allow the owner of "john@example.com" to send emails as "george@example.com" while I am out of office. Will those emails be stored in the…
2
votes
0 answers

Constrained Delegation between IIS, SQL Server, SSRS and File System

First of all, not sure which site is best suited for this question be it SO, SF or SU so please feel free to suggest migration! I have a requirement to constrain delegation between several machines to enable identity impersonation between different…
Gareth
  • 735
  • 5
  • 10
2
votes
1 answer

Delegate Access and Subfolders

Sometimes when a user leaves a company the manager will request access to the former employees mailbox on our Exchange 2013. I can use mailbox delegation to give them full access, but if there are any subfolders they don't see those. How can I on…
Wayne In Yak
  • 233
  • 1
  • 3
  • 12
2
votes
1 answer

Azure - Is it possible for global administrators to enforce per-subscription resource limits?

My company is moving all its internal production and development servers to Azure, and needs a way to delegate administration while at the same time keeping track of resource usage; thus, we are going to create multiple subscriptions, one for core…
Massimo
  • 68,714
  • 56
  • 196
  • 319
2
votes
1 answer

Active Directory, delegating control for specific class

There are objects in my AD that have objectClass set to device, and I would like to delegate control to non-admin users so they will be able to add new and delete existing objects with objectClass set to device, but not other objects that have…
svakak
  • 112
  • 2
  • 7
2
votes
3 answers

How long is the update delay when changing nameserver delegation, and how can I test the change?

I just changed our delegated name sever though our registrar (MelbourneIT, if it's important). The updated nameserver value shows in the whois report - does this mean that the update has completed? If not, how long should I expect to wait for the…
chickeninabiscuit
  • 1,094
  • 6
  • 17
  • 33
2
votes
1 answer

Difference between "Descendant User Objects" and just "User Objects"

i am trying to delegate permissions on a cetain OU to a certain group. All i find is "Descendatn User Objects" and not just "User Objects" ; we have those available in other domain; please do let me know what is the difference and how does it…
Darktux
  • 827
  • 5
  • 20
  • 36
1 2
3
9 10