The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
3answers
189 views

create dns delegation where new nameserver are to be in the delegation on windows 2008 os

We have a domain "muzzard.com" which has nameservers ns0 and ns1 I'd like to add a delegation aws.muzzard.com and have the nameservers for that delegation in there e.g. ns0.aws.muzzard.com etc. ...
3
votes
2answers
376 views

DNS delegation on same server with DDNS and second slave server

I have two servers running BIND, the first is setup as the master of two zones and the second as a slave for those zones. The zones are example.com and ddns.example.com. I have DDNS running and ...
1
vote
2answers
624 views

delegating /24 and /64 reverse zones

I'm sure I'm overlooking something so simple, but I'm just not seeing it... I'm trying to delegate the /24 and /64 reverse zones for our Test network to hosts within the Test network. I'm seeing the ...
2
votes
1answer
68 views

Azure - Is it possible for global administrators to enforce per-subscription resource limits?

My company is moving all its internal production and development servers to Azure, and needs a way to delegate administration while at the same time keeping track of resource usage; thus, we are going ...
1
vote
1answer
59 views

is it possible to delegate file srv and print srv managing to other users in windows 2008 R2 without giving them full admin rights?

we have some field service guys that work locally for some of our customers, we want to transfer the tasks of managing file servers and print servers to them. first we Thought about giving them local ...
1
vote
1answer
193 views

Delete entry from Exchange calendar when delegate denies meeting request

I created a Room-Mailbox in Exchange. This Mailbox will be used to manage vacation Days. I delegated control to a user to deny and accept vacation requests. The requestee is informed correctly about ...
0
votes
1answer
139 views

Sorting out delegation

I'm trying to sort out Windows Auth delegation for an IIS box talking to a SQL box, which should be passing through the users credentials. I've detailed the configuration of this double-hop scenario ...
0
votes
1answer
244 views

How do I get a list of users in AD who have the ability to reset another user's password?

I need to provide a list of all the users who can reset other users' passwords. e.g. Service Desk Staff, Domain Admins etc. This might have been delegated at a specific OU or at domain level. Is ...
0
votes
1answer
328 views

Cross Forest Delegation

Is it possible to do delegation in a cross forest scenario with only a one way trust? I have 2 domains which are in different forests, and there is a one way trust from the resourcedomain to the ...
2
votes
0answers
279 views

Delegate rights to AD security group to Add UNIX Attributes

We have several Linux servers that are AD integrated, all our DC's are Server 2008R2 running at 2003 DFL and FFL with MSSFU installed. I wish to delegate the population of the UNIX Attributes tab to ...
2
votes
0answers
704 views

Grant Kerberos Constrained Delegation to SQL Server 2012 running as Managed Service Account

I can't see how to grant Kerberos Constrained Delegation for a service identified by a Managed Service Account. I have a Windows 2008 R2 functional level single domain single forest, two 2008 R2 SP1 ...
1
vote
0answers
235 views

Account Operators built in group and “User Cannot Change Password” property

I have a question about configuring of "User Cannot Change Password" property. Does default "Account Operators" domain group has ability to change this property? If not can it be delegated via AD ...
1
vote
0answers
79 views

IIS 7.5 connect to a web site using IIS Manager using the current user credentials

I am trying to use IIS Manager to connect to a site or an application but would like to pass through or use the current authenticated user's credentials. There is only a username and password option ...
1
vote
0answers
64 views

bind9, Resolve example.com but forward *.example.com to a forwarder possible?

is it possible in bind to resolve example.com with a zone but resolve all subdomains of example.com with a forwarder? If somebody knows how this can work or has some simple sample configurations i ...
1
vote
0answers
139 views

Kerberos: connection from win app running from IIS to SQL failed

I have an IIS web-application with Windows authentication and impersonation. This application connects to SQL server. In this case Kerberos works fine. But there is a problem. Web-application runs ...
1
vote
0answers
595 views

How to fix “SignTool Error: IStore2::Load returned error: 0x80090345”

I have a Jenkins job running the signtool utility on a remote node, the console log looks like so: Started by user anonymous Building remotely on vm-builder [VE] $ cmd /c call "C:\Documents and ...
0
votes
0answers
14 views

Kerberos constrained delegation

There is a small problem with the setting Kerberos constrained delegation in Active Directory. The scheme works as follows: 1. Client workstation. 2. Web server with Windows 2008 Ent installed IIS ...
0
votes
0answers
42 views

Quest PowerShell: Export AD permissions and apply them at a later stage

I'm trying to standardise our AD permissions for our 4 support groups. I've already applied permissions for 2 standard groups (Global support) and I'm now facing a painful clean-up for site based ...
0
votes
0answers
29 views

Reporting Services 2008 and kerberos delegation/impersonation

I've spent quite some time configuring the use of Kerberos and Windows 2008 SQL Reporting Services - I've registered all the SPNs, configured the various authentication options in the XML files and ...
0
votes
0answers
50 views

How can I utilise resource based delegation

Windows 2012 comes with an extension to the existing Kerberos Constrained Delegation, called resource based delegation (RBCD). There are a number of great articles that explain how it works for ...
0
votes
0answers
19 views

Enabling constrained delegation on DC computer account

Is it necessary to have constrained delegation enabled on Microsoft AD domain controller computer account? If yes then why and what are consequences of disabling it? I'm mainly interested in current ...
0
votes
0answers
87 views

Triple hop authentication

Trying to setup impersonation for web application running in IIS that connects to a web service that connects to SQL server, where all the layers are on different machines. Here is the setup Web ...
0
votes
0answers
121 views

Any other option than HTTPS + Basic auth for reverse proxied IIS site that uses double hop authentication to SQL server

We've been struggling for a while to get, what I had assumed would be a relatively common scenario to work and would appreciate any pointers. We have 2 x Windows 2012 Servers running IIS Server SQL ...