Questions tagged [delegation]
The delegation tag has no usage guidance.
0
votes
0answers
39 views
Kerberos Double Hop Delegation from IIS to SQL server (using django)
I need to pass the credentials (Integrated Windows Authentication) from a django website on IIS onto a backend SQL server so that it runs under the proper user context.
This is how my setup looks so ...
0
votes
0answers
16 views
Is it possible to see when delegated access was set up in exch 2010?
Found an account in one of our older servers... its an exchange 2010 server.
It has delegated access which looks out of place.
I'm wondering if there is anyway I can tell when the delegated access ...
4
votes
0answers
98 views
How can I determine what permissions my user is missing for receiving a ZFS dataset?
I have a FreeNAS (11.1-U1) and a FreeBSD (11.1-RELEASE-p6) machine. On the FreeNAS I'd like to zfs receive recursive snapshots as a non-root user with delegated privileges. This appears to work well ...
0
votes
1answer
96 views
Trouble with domain delegation
I suspect I have a problem with domain delegation.
Notes:
Following addresses and names are examples
I have two public static IPs and own a domain name
I'm using Debian 9 and Bind 9
I want ...
1
vote
1answer
349 views
How to configure delegation in an ASP.Net Core 2.0 app on windows with users authenticated via Azure AD
The Setup:
I have a web app written in ASP.NET Core 2.0 that authenticates against Azure AD using OpenID Connect. It is running on a machine that is part of an Azure AD domain. The app does have an ...
1
vote
1answer
469 views
Active Directory Delegated Permissions grant multiple users access to edit a Global Security group with powershell
Hello Fellow IT Guru’s
I am hoping to gain a little knowledge here regarding the ability to manage Active Directory Delegated permissions through powershell.
I’ve recently ran into an issue where I ...
1
vote
0answers
22 views
Delegated Hyper-V Management
I have a small, clustered Hyper-V infrastructure and one of my clients has 7 VMs with me currently. Their IT person would like to get console access to the instances, so if something freezes (as an ...
0
votes
2answers
178 views
Keep inheritance enabled for Delegation
I want to give a normal "Domain Users", permission to reset the password of users in the Domain Admins Group.
So I created an OU and moved all the user account targets into it.
Then I used "Delegate ...
0
votes
1answer
58 views
Delegating reverse dns records - Bind (Ubuntu Server)
I have got a mail server attached to a static provided by my ISP. Our dns service is run by buddyns DNS service because our ISP blocked 53 by default. The DNS service is excellent, but i dont know how ...
0
votes
1answer
524 views
How to delegate permission to Mark OU Object as “Protected from Accidental Deletion”
I have created a new OU and delegated its permissions to multiple personnel; unfortunately, when they create a new OU underneath the previous one, the checkbox of "Protect from Accidental Deletion" is ...
-1
votes
1answer
30 views
Is it possible to add “Prefixes” before namesers?
I've been looking at this website where you enter an input string and you get an output "some_random_string.1.nameserver.io".
Now, I'm not sure if this is possible for any nameserver. Say you have ...
2
votes
2answers
874 views
“Permission Denied” creating a new domain-based Dfs root as non-Administrator
I have been tasked to delegate a number of everyday tasks in our domain to a group of technicians which does not have Domain Admins membership. One of these tasks is the creation of new domain-based ...
0
votes
1answer
74 views
Minimum delegation needed in AD for reading Scheduled tasks and Services info
I am trying to monitor Scheduled tasks and Services remotely(from a different domain) on windows servers (domain controllers) ; we are planning to implement a minimum required delegation model for ...
0
votes
1answer
516 views
PowerShell credSSP session using IP
I need to open a Powershell remote session using credSSP authentication from server A to B. However, server A cannot resolve name of B.
CredSSP is enabled on A to pass credentials (in "Allow ...
1
vote
2answers
222 views
How to delegate OU permissions to a computer account nested in a security group?
The problem:
I can't give a computer account the permissions to add groups to an OU by adding that computer account to a security group that has been granted the permission to add groups to that OU.
...
3
votes
2answers
415 views
Mimic delegation of control wizard with PowerShell
I want to delegate control of the TestUsers organizational unit to a user NickA and give the following permissions to it:
Create, delete, and manage user accounts
Reset user passwords and force ...
1
vote
1answer
165 views
Delegate Specific rights to Helpdesk on AD
Domain Controller - Windows Server 2008 R2 standard
I need to delegate only below task to helpdesk id for specific OU i.e
1) Creating User
2) and after creating that user, add them to specific ...
0
votes
1answer
524 views
Last Name attribute not available for Read/Write in Delegation of Control Wizard
I am using Active Directory Users and Computers version 6.1.7601.17514
I am attempting to delegate the ability for our HR users to edit the First and Last Name for user accounts in Active Directory. ...
4
votes
1answer
183 views
Suggestions For IT Staff Delegation
looking for some suggestions or tips on how to setup our IT admins with delegation and server access. I started at a new organization and saw that every IT staff member is a domain admin. Looks like ...
1
vote
1answer
7k views
With DNS, what is the difference between Delegation, Forwarding, Conditional Forwarding, and Stub zones? [closed]
I am surprised at how many different ways I have read answers to this question and I still don't know the fine differences of the answer.
For each of these similar DNS concepts:
Delegation
...
0
votes
1answer
294 views
What kind of SPN is required to delegate client credentials to a SMB Share?
I'm trying to delegate KERBEROS authentication from an SQL Server to a file server over OLEDB.
Is there a particular Service Principle Name that is used to delegate credentials from an SQL Server ...
2
votes
1answer
181 views
If I authorize someone to send as me though Exchange Online will I see the sent emails?
Lets assume I am the owner of the mailbox "george@example.com" and via the Exchange Online administration I allow the owner of "john@example.com" to send emails as "george@example.com" while I am out ...
1
vote
1answer
124 views
what happens if the authoritative DNS servers and the NS records don't agree
What happens if the NS records in a zone don't agree with the root nameserver delegation for that same zone? In other words, if a registrar knows that the authoritative nameservers for example.com ...
0
votes
1answer
2k views
Export/Import Active Directory Permissions Delegations
I have an OU in AD, which has delegated permissions assigned to it.
Is there any way/tool to export delegated permissions (or just all security permissions) for an OU and then apply the very same ...
2
votes
0answers
374 views
Constrained Delegation between IIS, SQL Server, SSRS and File System
First of all, not sure which site is best suited for this question be it SO, SF or SU so please feel free to suggest migration!
I have a requirement to constrain delegation between several machines ...
5
votes
1answer
791 views
Is there an easy way to set up Active Directory Constrained Delegation for all Domain Controllers
We've worked through configuring AD constrained delegation for a service account in our domain, and we've gotten everything to work in principle. However, to do so we had to set up LDAP delegation to ...
0
votes
1answer
296 views
Issues with delegating subdomain to AD server
I have a working authorative BIND 9.8.4-P2 server on freebsd on domain domain.com with IP 192.168.0.3 and name ns.domain.com that I did not set up on my own. It is a hidden server from which a subset ...
0
votes
0answers
518 views
Kerberos constrained delegation
There is a small problem with the setting Kerberos constrained delegation in Active Directory.
The scheme works as follows:
1. Client workstation.
2. Web server with Windows 2008 Ent installed IIS (...
0
votes
2answers
491 views
Active Directory Users Delegated Permissions
This is probably a dumb question, but how does the delegated user access ad to make these changes? I have set this up but a user cannot launch the active directory users and groups tool. Only admins ...
4
votes
2answers
829 views
Can windows enable delegation across domains?
I have two domains
foo.local
test.local
I can run powershell hyper-v cmdlets against the test.local hyper-v server if I am using a VM that is in the test.local domain.
Get-VM -ComputerName ...
0
votes
1answer
720 views
Quest PowerShell: Export AD permissions and apply them at a later stage
I'm trying to standardise our AD permissions for our 4 support groups. I've already applied permissions for 2 standard groups (Global support) and I'm now facing a painful clean-up for site based ...
0
votes
1answer
516 views
Zone delegation
I'm running a bind 9.8-server and want to delegate a sub-domain to a different dns-server (also administered by me), but I can't seem to get bind to accept my config and I can't figure out why.
Below ...
0
votes
1answer
392 views
Nameserver delegation to private subnet
I'm currently having some problems delegating a subdomain, e.g. lan.example.com, to a nameserver in a private network.
My private network is split in to subnets
192.168.0.1/24 <--- 192.168.0.1
...
1
vote
1answer
290 views
is it possible to delegate file srv and print srv managing to other users in windows 2008 R2 without giving them full admin rights?
we have some field service guys that work locally for some of our customers, we want to transfer the tasks of managing file servers and print servers to them. first we Thought about giving them local ...
7
votes
1answer
3k views
In Active Directory, how do I delegate write permissions on specific attributes of protected user accounts?
We have a tool being developed that will keep specific attributes of Active Directory user objects up to date with an authoritative source of employee information truth elsewhere, so that when someone'...
5
votes
2answers
2k views
Active Directory Permissions: Delete vs Move
I want our help desk to be able to move user accounts but NOT delete them. Here is the summary of our current permissions set on the affected OU's (this DOES allow them to delete user accounts):
...
2
votes
1answer
43 views
Delegate Access and Subfolders
Sometimes when a user leaves a company the manager will request access to the former employees mailbox on our Exchange 2013. I can use mailbox delegation to give them full access, but if there are any ...
1
vote
0answers
930 views
Account Operators built in group and “User Cannot Change Password” property
I have a question about configuring of "User Cannot Change Password" property. Does default "Account Operators" domain group has ability to change this property? If not can it be delegated via AD ...
0
votes
0answers
34 views
Enabling constrained delegation on DC computer account
Is it necessary to have constrained delegation enabled on Microsoft AD domain controller computer account? If yes then why and what are consequences of disabling it?
I'm mainly interested in current ...
2
votes
1answer
233 views
Azure - Is it possible for global administrators to enforce per-subscription resource limits?
My company is moving all its internal production and development servers to Azure, and needs a way to delegate administration while at the same time keeping track of resource usage; thus, we are going ...
1
vote
1answer
11k views
How can I delegate “Attributes 1-15” in Exchange / AD?
The following attributes are present on an Exchange user, and this is what my colleague sees: (notice the locks)
How can I properly delegate Read access (or Read write if it must be) to these ...
0
votes
0answers
316 views
Any other option than HTTPS + Basic auth for reverse proxied IIS site that uses double hop authentication to SQL server
We've been struggling for a while to get, what I had assumed would be a relatively common scenario to work and would appreciate any pointers.
We have 2 x Windows 2012 Servers running
IIS Server
SQL ...
5
votes
1answer
1k views
Different ACLs on two OU's with same “protect object from deletion” setting
Background
After I configured our Active Directory so that the ability to move computers was delegated to helpdesk staff, I started hearing reports that computers would get "stuck" in specific OU's. ...
4
votes
1answer
3k views
DNS referral / delegation: which DNS is responsible; How to delegate the right way?
Introduction
I bought the domain earechnung.at with Hetzner and am using my webspace at All-Inkl. I want to use the nameservers of my webhost (All-Inkl).
Zonefiles and Nameservers
As I registered ...
1
vote
1answer
229 views
Unable to delegate Replicating Directory Changes to a user in AD - option missing from wizard
Disclaimer: I originally asked this over at SharePoint SE, but I figured I'd ask it here too as it's more of an AD problem than a SP specific one.
I'm trying to delegate the Replicating Directory ...
3
votes
0answers
259 views
IIS 7.5 connect to a web site using IIS Manager using the current user credentials
I am trying to use IIS Manager to connect to a site or an application but would like to pass through or use the current authenticated user's credentials. There is only a username and password option ...
1
vote
1answer
657 views
Set Country / Region field Access via Active Directory Delegation
After creating a security group for special permissions (edit User Objects fields like Street, ZIP etc.) I have a problem of not being able to delegate permission for the field "Country/Region" on a ...
8
votes
1answer
567 views
NS records chicken and egg: NS in the domain it's serving [duplicate]
I've dealt with BIND for years and this has always kind of bugged me.
$ dig google.com ns
;; QUESTION SECTION:
;google.com. IN NS
;; ANSWER SECTION:
google.com. 87046 IN NS ns3....
2
votes
1answer
228 views
Active Directory, delegating control for specific class
There are objects in my AD that have objectClass set to device, and I would like to delegate control to non-admin users so they will be able to add new and delete existing objects with objectClass set ...
4
votes
1answer
5k views
How to proper delegate domain in BIND for Active Directory servers
I have to delegate domain for AD serwers. Let say example.com and I'm using Bind(dns.bind.com) on CentOS.
I added proprer configuration to named.conf and using A,NS records delegate domain to AD ...
