Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [delegation]

137 questions
1
vote
3 answers

Set up delegation trust for domain user

I have a domain user account (in mydomain.com, let's say) that is set to be the logon account for numerous instances of SQL Server 2005 on multiple machines. I want to have this domain account (not the machine accounts) trusted for delegation,…
squillman
  • 37,618
  • 10
  • 90
  • 145
1
vote
3 answers

What strategies do admins use to devolve/delegate control of Bind configurations on a single DNS server?

I have a relatively simple Bind/DNS configuration, and would like to allow some of my users to be able to add their own configurations (eg A records and CNAMEs). Even though I trust my users, I want to restrict access to all configuration files to…
EdwardTeach
  • 622
  • 8
  • 20
1
vote
0 answers

How to fix "SignTool Error: IStore2::Load returned error: 0x80090345"

I have a Jenkins job running the signtool utility on a remote node, the console log looks like so: Started by user anonymous Building remotely on vm-builder [VE] $ cmd /c call "C:\Documents and…
mark
  • 691
  • 2
  • 14
  • 31
1
vote
1 answer

Granting Editor rights in Outlook 2007 via Exchange Management Console?

Am I missing something? Do my individual users have to allow delegate access through the tools>options>delegates tab, or can I give individuals the rights to do so in EMC? This is a new position for me, and I feel crazy for asking, but everyone is…
gtaylor85
  • 199
  • 2
  • 3
  • 14
1
vote
2 answers

Kerberos constrained delegation not working

I have a typical double hop scenario, User ->IIS->SQL. I am using IIS 7.5, which is using Kernal Model Authentication, so I am setting up the IIS server account for delegation. If I set this to "Trust this computer for delegation to any…
Sam Cogan
  • 38,158
  • 6
  • 77
  • 113
1
vote
1 answer

Asp.NET Delegation and Calling a SharePoint Webservice

I'm trying to make a call to the SharePoint Search Webservice from an Asp.NET 4.0 application that does not reside on the SharePoint server. Everything seems to work, accept it is using the AppPool's credentials (a domain service account) to…
Nick DeMayo
  • 287
  • 4
  • 14
1
vote
2 answers

Creating CNAME to delegated domain

We are trying to configure F5 to do load balancing on 4 sub domains similar to this article. For Example prod.wip.example.com. NS F5NS1.example.com. prod.wip.example.com. NS F5NS2.example.com. test.wip.example.com. NS F5NS1.example.com.…
Starsky
  • 103
  • 1
  • 8
1
vote
1 answer

openID delegation - no endpoint found

I posted this query on staackoverflow main but it was suggested I should ask here. Sorry for the non-openID login, but as you can see, I'm having some issues. In short: A couple weeks ago I noticed I could no longer log in with my URL delegating to…
Phae
  • 13
  • 3
1
vote
1 answer

Delegate "Read" Ability to GPO's

Is there a way to allow a non-administrator to "read" (as in browse and look at the settings) of domain gpo's? I see in GPMC there is an option to allow delegation of "Read Group Policy Results data" but I'm not solid on whether that will provide…
Mitch
  • 1,127
  • 11
  • 19
1
vote
1 answer

Windows Admin Center Resource Based delegation stopped working with KRB_AP_ERR_MODIFIED error

Our WAC installation SSO (via resource based delegation) stopped working last week for unknown reasons and it's driving me mad. The following event is logged on the WAC server when attempting to connect to a managed client (any of them) in the…
JulioQc
  • 62
  • 1
  • 9
1
vote
1 answer

Is delegated DNS server authoritative server?

In the first picture, the order when making a query is client -> ISP DNS Server -> Root DNS -> Top Level DNS -> Authoritative name server. But in the second picture, the order is client -> ISP DNS Server -> Root DNS -> Top Level DNS ->…
null
  • 11
  • 3
1
vote
1 answer

Are horizontal referrals in DNS allowed?

I've been looking into DNS quite a bit lately and currently got the following error message with the DIG command: BAD (HORIZONTAL) REFERRAL From my understanding, this is caused due to delegating a name lookup without traversing down the "DNS tree".…
Login
  • 13
  • 2
1
vote
1 answer

Why is a AD Domain controller object set to "unconstrained delegation"? Can this be altered?

As part of identifying accounts with "unconstrained Delegation" , it came to our notice that all domain controllers are configured that way. Can i change "unconstrained delegation" setting on all domain controllers in the org? what would break if i…
Darktux
  • 827
  • 5
  • 20
  • 36
0
votes
0 answers

In DNS, how do I delegate just the zone apex to a different nameserver?

I have a domain with two completely distinct backends, as follows: The zone apex (example.com) serves a CloudFront distribution All other subdomains (*.example.com) point to a load balancer with an application behind it. There are thousands of…
mittelmania
  • 209
  • 2
  • 10
0
votes
1 answer

Delegated access to shared mailboxes without rights to deleting messages

So I'd like to grant my users access to a shared mailbox with delegated access - easy enough. (We use Office 365) But how can I restrict that access, so they can't DELETE anything in that mailbox? I'd like them to still be able to move items, create…
kjubus
  • 145
  • 1
  • 9
1 2 3
…
9 10