Questions tagged [delegation]
141 questions
0
votes
1 answer
Constrained Delegation works if App Pool is Local System but not if Network Service in IIS 7
I have an issue with Constrained Delegation and IIS 7 on Windows Server 2008.
We have a web application which uses impersonation to access a SQL Report Server. This has worked fine with IIS 6 with both Trusted for Delegation and Constrained…

Qwerty
- 1,504
- 2
- 15
- 24
0
votes
2 answers
Create a linked SQL server across a domain
I am trying to create linked server on a SQL 2008 server to sql server on another domain. I tried following the advice given in this article: http://msdn.microsoft.com/en-us/library/ee191523%28v=sql.100%29.aspx about setting up Kerberos delegation…

Paul
- 133
- 1
- 8
0
votes
1 answer
How do I get a list of users in AD who have the ability to reset another user's password?
I need to provide a list of all the users who can reset other users' passwords. e.g. Service Desk Staff, Domain Admins etc.
This might have been delegated at a specific OU or at domain level. Is there a way to query AD to output ALL users who have…

SophieG
- 1
- 1
0
votes
2 answers
Automate setup of constrained kerberos delegation in AD
I have a web app that uses some backend servers (UNC, HTTP and SQL). To get this working I need to configure ServicePrincipalNames for the account running the IIS AppPool and then allow kerberos delegation to the backend services.
I know how to…

Grhm
- 293
- 5
- 16
0
votes
1 answer
Cross Forest Delegation
Is it possible to do delegation in a cross forest scenario with only a one way trust?
I have 2 domains which are in different forests, and there is a one way trust from the resourcedomain to the userdomain. The SPN's are registered properly on the…
user59052
0
votes
2 answers
Permissions, rights, roles, user groups, delegations
I am looking for a good book, Internet resource that can clearly explain these terms.
Really, I would not like to read any Microsoft books or any book about windows or other operation systems. I really need the theoretical explanations.
I am…

igor
- 137
- 1
- 7
0
votes
1 answer
Question about delegating zone
A little question about DNS. Given a domain, say:
example.com
I want to setup a subdomain like this:
sub.example.com
I want to delegate this zone to third party Name Servers(secondaries), say:
ns1.otherdomain.com
ns2.otherdomain.com
When defining…

CarlosH
- 423
- 2
- 5
- 10
0
votes
0 answers
Active Directory: How to allow a foreign server to authenticate with a delegated ticket
It is a complex setup, which I want to explain first (if you dont care, just scroll to 5) ) :
1) Company has multiple Active Directory Forests, which are:
user.local --> here are all user accounts stored
server.local -> here are all servers are…

TheFamousSpy
- 1
- 2
0
votes
0 answers
powerdns delegation - nslookup print ANSWER and SERVFAIL at the same time
Two powerdns are configured and divided into A and B. B is delegated by A.
Host A configured pdns and pdns-recursor, host B configured pdns.
[Version info]
pdns-server : 4.7.2
pdns-backend-pgsql : 4.7.2
pdns-recursor : 4.2.1
postgresql : 15.0
Here…

Daniel
- 1
- 1
0
votes
1 answer
How do i know if example.com is delegating example.mydomain.com to its own zone?
An additional question is, can I find out what zones example.com is delegating to?
This all assumes I am not an Admin for any of the sites/zones in question -- I'm just on the public internet, these are public-facing servers/zones, etc.
If i know…

Peter Smith
- 101
- 4
0
votes
0 answers
matrix-synapse delegation fails due to "No such file or directory" error on delegating server
I am setting up delegation on a synapse server. I follow the official docs and seem to have everything in place. I get the following error on example.com nginx logs when I enter the homeserver "example.org" in a client, that is supposed to delegate…

randmin
- 59
- 8
0
votes
1 answer
DNS - delegation - broadcast and network IP adresses
Is it a problem if I delegate network and broadcast addresses as part of network delegation in DNS?
I am following instructions for classless delegation of network on Zytrax (3.3 Reverse Map Delegation).
In the example from Zytrax (bellow) it's…

Jiri Mensik
- 7
- 4
0
votes
1 answer
On which OU should we delegate permissions for adding computer to a domain - clarify microsoft docs
Following principle of Least-Privilege Administrative Model I'm making custom group for managing domain, that would be less privileged than Domain Administrator. For starters it should have permission for adding computer to a domain.
I'm testing…

AnJ
- 151
- 1
- 6
0
votes
1 answer
Outlook 2007 Mutliple Accounts
We have someone here set up with multiple accounts in Outlook 2007. We don't have an exchange server. When this person sends a meeting request from the non default account, it says it's from [non default email] on behalf of [default email].
My…
Aaron Smith
0
votes
1 answer
Exchange (2016) many mailbox delegations and throttling policies
At a customers site with 20+ employees per team I get an outlook warning message roughly translated to "The amount of elements opened at once has been limited by the server administrator".
The customers requirement is that each team member can…

Silberling
- 41
- 8