Questions tagged [delegation]

137 questions
0
votes
0 answers

Enabling constrained delegation on DC computer account

Is it necessary to have constrained delegation enabled on Microsoft AD domain controller computer account? If yes then why and what are consequences of disabling it? I'm mainly interested in current versions of Windows Server 2008/2012, though don't…
Mikhail
  • 1,287
  • 3
  • 18
  • 35
0
votes
0 answers

Any other option than HTTPS + Basic auth for reverse proxied IIS site that uses double hop authentication to SQL server

We've been struggling for a while to get, what I had assumed would be a relatively common scenario to work and would appreciate any pointers. We have 2 x Windows 2012 Servers running IIS Server SQL Server 2012 We have kerberos delegation set up…
Phil
  • 3,138
  • 1
  • 21
  • 27
0
votes
1 answer

rDNS entry on a separate name server from forward dns - is this okay?

Our reverse DNS lookup is delegated to our name server (ns.example1.com) by AT&T, who leases us our IP address (1.2.3.4) and our forward DNS lookups were on the same name server (ns.example1.com). Previously rDNS lookups for abc.example0.com were…
0
votes
1 answer

Delegate software install/uninstall power to users/groups

I would like to have support personnel install and uninstall software across the domain, with no less and no more admininstrative capabilities. How do I do so?
Oxwivi
  • 204
  • 3
  • 12
0
votes
1 answer

Multihop Kerberos delegation on IIS7 / Windows 2008

So here I am again dealing with probably the number one support question on IIS, SPNs. I am not a novice when it comes to this, having lived the pains of getting SSRS front ends to delegate for SQL and SSAS back-ends in a number of different…
tlum
  • 257
  • 1
  • 8
0
votes
1 answer

DNS config to handle email for third party subdomain

Our customers host their own email (e.g. company.com), but need our service to handle email addressed to a specific subdomain (e.g. sub.company.com) We'd like to control DNS for their subdomain, allowing us to have IP address flexibility in…
0
votes
1 answer

Exchange 2010 and Delegate Oddity

I've tested and reproduced a problem that goes like this: Jo is a delegate for Steve. When Steve gets an invite, Jo receives a copy and accepts (or declines). Jo cannot accept or decline on her Mac using Outlook 2011. (HTTP error: -18500 "The…
tcv
  • 651
  • 8
  • 21
0
votes
3 answers

create dns delegation where new nameserver are to be in the delegation on windows 2008 os

We have a domain "muzzard.com" which has nameservers ns0 and ns1 I'd like to add a delegation aws.muzzard.com and have the nameservers for that delegation in there e.g. ns0.aws.muzzard.com etc. When I go through the new delegation wizard it asks…
bendecko
  • 141
  • 1
  • 1
  • 9
0
votes
1 answer

Delegation issue

I have a small vps in the Netherlands and a domain registered with bluehost. I added this domain account (WHM) to my vps by changing the nameserver of the correspondent domain on bluehost to ns1.xx.com and ns2.xx.com - Is that the correct way to…
0
votes
3 answers

How can I add a custom Powershell CMDLET to Exchange 2010?

I remember reading about how it's possible to add scripts or commandlets to Exchange 2010... in a way that as soon as Powershell imports the remote commands, your custom command is available as well. My thought is that I'll use Exchange's roles to…
makerofthings7
  • 8,821
  • 28
  • 115
  • 196
0
votes
2 answers

What are best practices for giving users administrative access in Windows AD domain?

The title may be slightly misleading but I'm interested in best practices for delegating administrative access for two different scenarios: giving developers local administrative access to certain development servers Initially I would just add the…
JohnyD
  • 1,614
  • 2
  • 20
  • 29
0
votes
1 answer

Sorting out delegation

I'm trying to sort out Windows Auth delegation for an IIS box talking to a SQL box, which should be passing through the users credentials. I've detailed the configuration of this double-hop scenario and the configuration below: Issue…
Overflew
  • 101
  • 1
0
votes
2 answers

DNS delegation without changing WHOIS

I am hosting several domains on my own nameservers. Some I'd like to use with a third party webhosting provider that asked me to move the domain over to them as they don't support external nameservers. Is it strictly necessary to update the WHOIS…
user87225
  • 109
  • 2
0
votes
1 answer

Constrained Delegation works if App Pool is Local System but not if Network Service in IIS 7

I have an issue with Constrained Delegation and IIS 7 on Windows Server 2008. We have a web application which uses impersonation to access a SQL Report Server. This has worked fine with IIS 6 with both Trusted for Delegation and Constrained…
Qwerty
  • 1,504
  • 2
  • 15
  • 24
0
votes
2 answers

Create a linked SQL server across a domain

I am trying to create linked server on a SQL 2008 server to sql server on another domain. I tried following the advice given in this article: http://msdn.microsoft.com/en-us/library/ee191523%28v=sql.100%29.aspx about setting up Kerberos delegation…
Paul
  • 133
  • 1
  • 8