Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [delegation]

141 questions
0
votes
0 answers

In DNS, how do I delegate just the zone apex to a different nameserver?

I have a domain with two completely distinct backends, as follows: The zone apex (example.com) serves a CloudFront distribution All other subdomains (*.example.com) point to a load balancer with an application behind it. There are thousands of…
mittelmania
  • 209
  • 2
  • 10
0
votes
1 answer

Delegated access to shared mailboxes without rights to deleting messages

So I'd like to grant my users access to a shared mailbox with delegated access - easy enough. (We use Office 365) But how can I restrict that access, so they can't DELETE anything in that mailbox? I'd like them to still be able to move items, create…
kjubus
  • 145
  • 1
  • 2
  • 9
0
votes
0 answers

Kerberos Double Hop Delegation from IIS to SQL server (using django)

I need to pass the credentials (Integrated Windows Authentication) from a django website on IIS onto a backend SQL server so that it runs under the proper user context. This is how my setup looks so far: Running SQL Server on sql_sever.domain.com…
notarobot
  • 41
  • 1
  • 6
0
votes
1 answer

Trouble with domain delegation

I suspect I have a problem with domain delegation. Notes: Following addresses and names are examples I have two public static IPs and own a domain name I'm using Debian 9 and Bind 9 I want something like this (IPs are public): on 0.0.0.0 is DNS…
Jakub Ejnik
  • 1
0
votes
2 answers

Keep inheritance enabled for Delegation

I want to give a normal "Domain Users", permission to reset the password of users in the Domain Admins Group. So I created an OU and moved all the user account targets into it. Then I used "Delegate Control" to give the password reset rights to the…
AlwaysOnandOn
  • 1
  • 1
0
votes
1 answer

Delegating reverse dns records - Bind (Ubuntu Server)

I have got a mail server attached to a static provided by my ISP. Our dns service is run by buddyns DNS service because our ISP blocked 53 by default. The DNS service is excellent, but i dont know how to set up ptr records and delegate it to buddy…
mindflame
  • 3
  • 1
  • 5
0
votes
1 answer

How to delegate permission to Mark OU Object as "Protected from Accidental Deletion"

I have created a new OU and delegated its permissions to multiple personnel; unfortunately, when they create a new OU underneath the previous one, the checkbox of "Protect from Accidental Deletion" is greyed out. How to enabled it via delegation for…
Darktux
  • 827
  • 5
  • 21
  • 36
0
votes
1 answer

Minimum delegation needed in AD for reading Scheduled tasks and Services info

I am trying to monitor Scheduled tasks and Services remotely(from a different domain) on windows servers (domain controllers) ; we are planning to implement a minimum required delegation model for this part; i tried multiple options, but only thing…
Darktux
  • 827
  • 5
  • 21
  • 36
0
votes
1 answer

PowerShell credSSP session using IP

I need to open a Powershell remote session using credSSP authentication from server A to B. However, server A cannot resolve name of B. CredSSP is enabled on A to pass credentials (in "Allow Delegating Fresh Credentials" is enabled…
Petr Snížek
  • 13
  • 3
0
votes
1 answer

Last Name attribute not available for Read/Write in Delegation of Control Wizard

I am using Active Directory Users and Computers version 6.1.7601.17514 I am attempting to delegate the ability for our HR users to edit the First and Last Name for user accounts in Active Directory. I am using the Active Directory Delegation of…
ComputerUser5243
  • 11
  • 5
0
votes
1 answer

What kind of SPN is required to delegate client credentials to a SMB Share?

I'm trying to delegate KERBEROS authentication from an SQL Server to a file server over OLEDB. Is there a particular Service Principle Name that is used to delegate credentials from an SQL Server to a file server? For instance, if I run a SQL…
leeand00
  • 4,869
  • 15
  • 69
  • 110
0
votes
1 answer

Export/Import Active Directory Permissions Delegations

I have an OU in AD, which has delegated permissions assigned to it. Is there any way/tool to export delegated permissions (or just all security permissions) for an OU and then apply the very same permissions to another OU in the AD structure? Export…
Volodymyr Molodets
  • 2,424
  • 9
  • 36
  • 52
0
votes
1 answer

Issues with delegating subdomain to AD server

I have a working authorative BIND 9.8.4-P2 server on freebsd on domain domain.com with IP 192.168.0.3 and name ns.domain.com that I did not set up on my own. It is a hidden server from which a subset is published to the providers server. I have…
martin
  • 161
  • 1
  • 7
0
votes
0 answers

Kerberos constrained delegation

There is a small problem with the setting Kerberos constrained delegation in Active Directory. The scheme works as follows: 1. Client workstation. 2. Web server with Windows 2008 Ent installed IIS (iis.domain.lab). Is a front-end server, the W3SVC…
cortes_
  • 11
  • 4
0
votes
2 answers

Active Directory Users Delegated Permissions

This is probably a dumb question, but how does the delegated user access ad to make these changes? I have set this up but a user cannot launch the active directory users and groups tool. Only admins can. Do I have to make the delgated user an admin…
QuestionMannn
  • 3
  • 3
1 2 3
…
9 10