Questions tagged [delegation]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

Azure VM not registered/delegated to Azure DNS

Fired up several basic Azure VM's with the basic/standard Azure DNS and followed machine naming like xxxxxxxx.westeurope.cloudapp.azure.com. Seems that one of those created VM doesn't exists in Azure ...
0
votes
0answers
12 views

Can gsuite admins define email delegates?

All of Google's documentation details how to enable delegation for an organization, however I want to know if there's a way for an administrator to define delegates for an account. My org has a ...
1
vote
1answer
37 views

Are horizontal referrals in DNS allowed?

I've been looking into DNS quite a bit lately and currently got the following error message with the DIG command: BAD (HORIZONTAL) REFERRAL From my understanding, this is caused due to delegating a ...
2
votes
0answers
20 views

Why is a AD Domain controller object set to “unconstrained delegation”? Can this be altered?

As part of identifying accounts with "unconstrained Delegation" , it came to our notice that all domain controllers are configured that way. Can i change "unconstrained delegation" setting on all ...
1
vote
2answers
145 views

MX record delegation

I have a client who manages their own DNS - all the A records and CNAME records for example.com and a number of subdomains. They want to use a dedicated subdomain for email - em.example.com. They ...
0
votes
0answers
46 views

In DNS, how do I delegate just the zone apex to a different nameserver?

I have a domain with two completely distinct backends, as follows: The zone apex (example.com) serves a CloudFront distribution All other subdomains (*.example.com) point to a load balancer with an ...
0
votes
0answers
42 views

Allow exchange server to send emails from any sender with valid SMTP auth without delegation?

I'm using Exchange Server 2019 and really enjoy the product and security. One feature I find great is that just because you have SMTP AUTH you can't send as some sender unless that sender allows the ...
0
votes
1answer
329 views

How to properly set-up ou DNS Zone delegation for the “_acme-challenge” subdomain?

We have hard times setting up a DNS Zone Delegation for one of our subdomains. We have one DNS record "_acme-challenge" that will change frequently, and this DNS record is defined directly on our ...
1
vote
0answers
225 views

Active Directory User Group Delegate Reset Password

I want to enable users to reset their AD passwords on our Windows Server 2012 through our Jira server. In order to make this happen, I added an AD user group with delegated control from the top-level ...
0
votes
0answers
18 views

Kerberos delegation in Java environment

I'm having trouble trying to configure the environment for a typical double-hop scenario. I have a Windows AD server and 2 services running on JVMs on Windows hosts of the same domain: service A and ...
0
votes
1answer
378 views

Enabling Unconstrained Delegation on Active Directory Domains

Where can i see the setting in domain , if i enable "unconstrained Delegation" by using below command? netdom.exe trust fabrikam.com /domain:contoso.com /EnableTGTDelegation:Yes
1
vote
1answer
307 views

SOA for DNS delegation

I'll first say that what I'm doing now seems to work, though I'm unclear on whether it's correct. I have a domain registrar company (inherited from a contract) and a name server company, separate ...
2
votes
1answer
237 views

Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)

Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
0
votes
1answer
14 views

Delegated access to shared mailboxes without rights to deleting messages

So I'd like to grant my users access to a shared mailbox with delegated access - easy enough. (We use Office 365) But how can I restrict that access, so they can't DELETE anything in that mailbox? I'...
2
votes
2answers
480 views

Can't Promote Server to Secondary Domain Controller

We have a server running Server 2008 R2 as our primary DC. We currently don't have a secondary DC, but are trying to add one. The secondary DC we are trying to use is running Server 2012 R2 Standard. ...
0
votes
0answers
1k views

Kerberos Double Hop Delegation from IIS to SQL server (using django)

I need to pass the credentials (Integrated Windows Authentication) from a django website on IIS onto a backend SQL server so that it runs under the proper user context. This is how my setup looks so ...
9
votes
2answers
628 views

How can I determine what permissions my user is missing for receiving a ZFS dataset?

I have a FreeNAS (11.1-U1) and a FreeBSD (11.1-RELEASE-p6) machine. On the FreeNAS I'd like to zfs receive recursive snapshots as a non-root user with delegated privileges. This appears to work well ...
0
votes
1answer
105 views

Trouble with domain delegation

I suspect I have a problem with domain delegation. Notes: Following addresses and names are examples I have two public static IPs and own a domain name I'm using Debian 9 and Bind 9 I want ...
1
vote
1answer
885 views

How to configure delegation in an ASP.Net Core 2.0 app on windows with users authenticated via Azure AD

The Setup: I have a web app written in ASP.NET Core 2.0 that authenticates against Azure AD using OpenID Connect. It is running on a machine that is part of an Azure AD domain. The app does have an ...
1
vote
1answer
944 views

Active Directory Delegated Permissions grant multiple users access to edit a Global Security group with powershell

Hello Fellow IT Guru’s I am hoping to gain a little knowledge here regarding the ability to manage Active Directory Delegated permissions through powershell. I’ve recently ran into an issue where I ...
1
vote
0answers
25 views

Delegated Hyper-V Management

I have a small, clustered Hyper-V infrastructure and one of my clients has 7 VMs with me currently. Their IT person would like to get console access to the instances, so if something freezes (as an ...
0
votes
2answers
869 views

Keep inheritance enabled for Delegation

I want to give a normal "Domain Users", permission to reset the password of users in the Domain Admins Group. So I created an OU and moved all the user account targets into it. Then I used "Delegate ...
0
votes
1answer
88 views

Delegating reverse dns records - Bind (Ubuntu Server)

I have got a mail server attached to a static provided by my ISP. Our dns service is run by buddyns DNS service because our ISP blocked 53 by default. The DNS service is excellent, but i dont know how ...
0
votes
1answer
1k views

How to delegate permission to Mark OU Object as “Protected from Accidental Deletion”

I have created a new OU and delegated its permissions to multiple personnel; unfortunately, when they create a new OU underneath the previous one, the checkbox of "Protect from Accidental Deletion" is ...
-1
votes
1answer
37 views

Is it possible to add “Prefixes” before namesers?

I've been looking at this website where you enter an input string and you get an output "some_random_string.1.nameserver.io". Now, I'm not sure if this is possible for any nameserver. Say you have ...
2
votes
3answers
3k views

“Permission Denied” creating a new domain-based Dfs root as non-Administrator

I have been tasked to delegate a number of everyday tasks in our domain to a group of technicians which does not have Domain Admins membership. One of these tasks is the creation of new domain-based ...
0
votes
1answer
88 views

Minimum delegation needed in AD for reading Scheduled tasks and Services info

I am trying to monitor Scheduled tasks and Services remotely(from a different domain) on windows servers (domain controllers) ; we are planning to implement a minimum required delegation model for ...
0
votes
1answer
870 views

PowerShell credSSP session using IP

I need to open a Powershell remote session using credSSP authentication from server A to B. However, server A cannot resolve name of B. CredSSP is enabled on A to pass credentials (in "Allow ...
1
vote
2answers
316 views

How to delegate OU permissions to a computer account nested in a security group?

The problem: I can't give a computer account the permissions to add groups to an OU by adding that computer account to a security group that has been granted the permission to add groups to that OU. ...
3
votes
2answers
1k views

Mimic delegation of control wizard with PowerShell

I want to delegate control of the TestUsers organizational unit to a user NickA and give the following permissions to it: Create, delete, and manage user accounts Reset user passwords and force ...
1
vote
1answer
288 views

Delegate Specific rights to Helpdesk on AD

Domain Controller - Windows Server 2008 R2 standard I need to delegate only below task to helpdesk id for specific OU i.e 1) Creating User 2) and after creating that user, add them to specific ...
0
votes
1answer
909 views

Last Name attribute not available for Read/Write in Delegation of Control Wizard

I am using Active Directory Users and Computers version 6.1.7601.17514 I am attempting to delegate the ability for our HR users to edit the First and Last Name for user accounts in Active Directory. ...
4
votes
1answer
239 views

Suggestions For IT Staff Delegation

looking for some suggestions or tips on how to setup our IT admins with delegation and server access. I started at a new organization and saw that every IT staff member is a domain admin. Looks like ...
1
vote
1answer
10k views

With DNS, what is the difference between Delegation, Forwarding, Conditional Forwarding, and Stub zones? [closed]

I am surprised at how many different ways I have read answers to this question and I still don't know the fine differences of the answer. For each of these similar DNS concepts: Delegation ...
0
votes
1answer
510 views

What kind of SPN is required to delegate client credentials to a SMB Share?

I'm trying to delegate KERBEROS authentication from an SQL Server to a file server over OLEDB. Is there a particular Service Principle Name that is used to delegate credentials from an SQL Server ...
2
votes
1answer
193 views

If I authorize someone to send as me though Exchange Online will I see the sent emails?

Lets assume I am the owner of the mailbox "george@example.com" and via the Exchange Online administration I allow the owner of "john@example.com" to send emails as "george@example.com" while I am out ...
1
vote
1answer
228 views

what happens if the authoritative DNS servers and the NS records don't agree

What happens if the NS records in a zone don't agree with the root nameserver delegation for that same zone? In other words, if a registrar knows that the authoritative nameservers for example.com ...
0
votes
1answer
3k views

Export/Import Active Directory Permissions Delegations

I have an OU in AD, which has delegated permissions assigned to it. Is there any way/tool to export delegated permissions (or just all security permissions) for an OU and then apply the very same ...
2
votes
0answers
529 views

Constrained Delegation between IIS, SQL Server, SSRS and File System

First of all, not sure which site is best suited for this question be it SO, SF or SU so please feel free to suggest migration! I have a requirement to constrain delegation between several machines ...
5
votes
1answer
1k views

Is there an easy way to set up Active Directory Constrained Delegation for all Domain Controllers

We've worked through configuring AD constrained delegation for a service account in our domain, and we've gotten everything to work in principle. However, to do so we had to set up LDAP delegation to ...
0
votes
1answer
550 views

Issues with delegating subdomain to AD server

I have a working authorative BIND 9.8.4-P2 server on freebsd on domain domain.com with IP 192.168.0.3 and name ns.domain.com that I did not set up on my own. It is a hidden server from which a subset ...
0
votes
0answers
931 views

Kerberos constrained delegation

There is a small problem with the setting Kerberos constrained delegation in Active Directory. The scheme works as follows: 1. Client workstation. 2. Web server with Windows 2008 Ent installed IIS (...
0
votes
2answers
513 views

Active Directory Users Delegated Permissions

This is probably a dumb question, but how does the delegated user access ad to make these changes? I have set this up but a user cannot launch the active directory users and groups tool. Only admins ...
4
votes
2answers
940 views

Can windows enable delegation across domains?

I have two domains foo.local test.local I can run powershell hyper-v cmdlets against the test.local hyper-v server if I am using a VM that is in the test.local domain. Get-VM -ComputerName ...
0
votes
1answer
959 views

Quest PowerShell: Export AD permissions and apply them at a later stage

I'm trying to standardise our AD permissions for our 4 support groups. I've already applied permissions for 2 standard groups (Global support) and I'm now facing a painful clean-up for site based ...
0
votes
1answer
876 views

Zone delegation

I'm running a bind 9.8-server and want to delegate a sub-domain to a different dns-server (also administered by me), but I can't seem to get bind to accept my config and I can't figure out why. Below ...
1
vote
1answer
638 views

Nameserver delegation to private subnet

I'm currently having some problems delegating a subdomain, e.g. lan.example.com, to a nameserver in a private network. My private network is split in to subnets 192.168.0.1/24 <--- 192.168.0.1 ...
1
vote
1answer
318 views

is it possible to delegate file srv and print srv managing to other users in windows 2008 R2 without giving them full admin rights?

we have some field service guys that work locally for some of our customers, we want to transfer the tasks of managing file servers and print servers to them. first we Thought about giving them local ...
7
votes
1answer
3k views

In Active Directory, how do I delegate write permissions on specific attributes of protected user accounts?

We have a tool being developed that will keep specific attributes of Active Directory user objects up to date with an authoritative source of employee information truth elsewhere, so that when someone'...
5
votes
2answers
3k views

Active Directory Permissions: Delete vs Move

I want our help desk to be able to move user accounts but NOT delete them. Here is the summary of our current permissions set on the affected OU's (this DOES allow them to delete user accounts): ...