Questions tagged [delegation]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
1 answer
482 views

How to enable Kerberos delegation from SQL Server to DFS File Share

I am trying to enable my MSSQL database users to BULK INSERT / OPENROWSET() a CSV file that is stored on our DFS/cifs/smb network shares. Initial Setup I have the MSSQL service set to run as a domain ...
JoeNahmias's user avatar
0 votes
0 answers
116 views

Active Directory: How to allow a foreign server to authenticate with a delegated ticket

It is a complex setup, which I want to explain first (if you dont care, just scroll to 5) ) : 1) Company has multiple Active Directory Forests, which are: user.local --> here are all user accounts ...
TheFamousSpy's user avatar
1 vote
0 answers
247 views

Kerberos delegation is failing to work with Java application

I have a Java web application running on Tomcat and Linux. This application uses Kerberos authentication for clients, so workstations are able to connect to the site and their windows credentials will ...
Aditya K's user avatar
  • 923
-1 votes
2 answers
302 views

DNS Sub domain delegation

In my test environment I have 4 nameservers. DNS1 nameserver I want to be authoritative for domain.com, and delegate the subdomain sub.domain.com to the other 3 nameservers. Client device is also ...
user117974's user avatar
0 votes
0 answers
87 views

powerdns delegation - nslookup print ANSWER and SERVFAIL at the same time

Two powerdns are configured and divided into A and B. B is delegated by A. Host A configured pdns and pdns-recursor, host B configured pdns. [Version info] pdns-server : 4.7.2 pdns-backend-pgsql : 4.7....
Daniel's user avatar
  • 1
0 votes
1 answer
35 views

How do i know if example.com is delegating example.mydomain.com to its own zone?

An additional question is, can I find out what zones example.com is delegating to? This all assumes I am not an Admin for any of the sites/zones in question -- I'm just on the public internet, these ...
Peter Smith's user avatar
0 votes
0 answers
1k views

matrix-synapse delegation fails due to "No such file or directory" error on delegating server

I am setting up delegation on a synapse server. I follow the official docs and seem to have everything in place. I get the following error on example.com nginx logs when I enter the homeserver "...
randmin's user avatar
  • 59
1 vote
1 answer
1k views

Windows Admin Center Resource Based delegation stopped working with KRB_AP_ERR_MODIFIED error

Our WAC installation SSO (via resource based delegation) stopped working last week for unknown reasons and it's driving me mad. The following event is logged on the WAC server when attempting to ...
JulioQc's user avatar
  • 62
0 votes
1 answer
50 views

DNS - delegation - broadcast and network IP adresses

Is it a problem if I delegate network and broadcast addresses as part of network delegation in DNS? I am following instructions for classless delegation of network on Zytrax (3.3 Reverse Map ...
Jiri Mensik's user avatar
0 votes
1 answer
652 views

On which OU should we delegate permissions for adding computer to a domain - clarify microsoft docs

Following principle of Least-Privilege Administrative Model I'm making custom group for managing domain, that would be less privileged than Domain Administrator. For starters it should have permission ...
AnJ's user avatar
  • 151
1 vote
1 answer
375 views

Is delegated DNS server authoritative server?

In the first picture, the order when making a query is client -> ISP DNS Server -> Root DNS -> Top Level DNS -> Authoritative name server. But in the second picture, the order is client -&...
null's user avatar
  • 11
0 votes
1 answer
2k views

Exchange (2016) many mailbox delegations and throttling policies

At a customers site with 20+ employees per team I get an outlook warning message roughly translated to "The amount of elements opened at once has been limited by the server administrator". ...
Silberling's user avatar
0 votes
1 answer
238 views

Can I send a mail through Exchange Online with a different reply name and reply address than what I am authenticating with?

Just switched to Exchange Online, and ran into an issue. We have an application that lets an employee email a customer. With our previous mail provider, we would authenticate to the SMTP server using ...
SomeGuy's user avatar
  • 387
-2 votes
2 answers
203 views

DNS subdomain delegation for different servers, but same domain

could someone explain to me what i am doing wrong, or it is just impossible to do. Just for learning, and understading how subdomain delegation works. I have 1 domain eg.: server.com and 3 VPS servers,...
zte813's user avatar
  • 3
0 votes
1 answer
86 views

Strange behavior: Exchange 2010, delegation, OWA, duplicate sent items

Please help me understand this strange (to me) behavior Goal Allow delegated users to send-on-behalf-of other mailbox using OWA and iOS/Android apps. Sent items should appear only once in the ...
goofology's user avatar
  • 382
0 votes
1 answer
111 views

Can gsuite admins define email delegates?

All of Google's documentation details how to enable delegation for an organization, however I want to know if there's a way for an administrator to define delegates for an account. My org has a ...
p0lar_bear's user avatar
1 vote
1 answer
783 views

Are horizontal referrals in DNS allowed?

I've been looking into DNS quite a bit lately and currently got the following error message with the DIG command: BAD (HORIZONTAL) REFERRAL From my understanding, this is caused due to delegating a ...
Login's user avatar
  • 13
1 vote
1 answer
2k views

Why is a AD Domain controller object set to "unconstrained delegation"? Can this be altered?

As part of identifying accounts with "unconstrained Delegation" , it came to our notice that all domain controllers are configured that way. Can i change "unconstrained delegation" setting on all ...
Darktux's user avatar
  • 827
1 vote
2 answers
728 views

MX record delegation

I have a client who manages their own DNS - all the A records and CNAME records for example.com and a number of subdomains. They want to use a dedicated subdomain for email - em.example.com. They ...
Doug McLean's user avatar
0 votes
0 answers
478 views

In DNS, how do I delegate just the zone apex to a different nameserver?

I have a domain with two completely distinct backends, as follows: The zone apex (example.com) serves a CloudFront distribution All other subdomains (*.example.com) point to a load balancer with an ...
mittelmania's user avatar
1 vote
1 answer
3k views

How to properly set-up ou DNS Zone delegation for the "_acme-challenge" subdomain?

We have hard times setting up a DNS Zone Delegation for one of our subdomains. We have one DNS record "_acme-challenge" that will change frequently, and this DNS record is defined directly on our ...
AlexLaforge's user avatar
1 vote
0 answers
821 views

Active Directory User Group Delegate Reset Password

I want to enable users to reset their AD passwords on our Windows Server 2012 through our Jira server. In order to make this happen, I added an AD user group with delegated control from the top-level ...
mojoritty's user avatar
1 vote
2 answers
2k views

Enabling Unconstrained Delegation on Active Directory Domains

Where can i see the setting in domain , if i enable "unconstrained Delegation" by using below command? netdom.exe trust fabrikam.com /domain:contoso.com /EnableTGTDelegation:Yes
Darktux's user avatar
  • 827
1 vote
1 answer
1k views

SOA for DNS delegation

I'll first say that what I'm doing now seems to work, though I'm unclear on whether it's correct. I have a domain registrar company (inherited from a contract) and a name server company, separate ...
Reinderien's user avatar
2 votes
2 answers
1k views

Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)

Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
Igor Akula's user avatar
0 votes
1 answer
198 views

Delegated access to shared mailboxes without rights to deleting messages

So I'd like to grant my users access to a shared mailbox with delegated access - easy enough. (We use Office 365) But how can I restrict that access, so they can't DELETE anything in that mailbox? I'...
kjubus's user avatar
  • 145
2 votes
3 answers
2k views

Can't Promote Server to Secondary Domain Controller

We have a server running Server 2008 R2 as our primary DC. We currently don't have a secondary DC, but are trying to add one. The secondary DC we are trying to use is running Server 2012 R2 Standard. ...
hairydresden's user avatar
0 votes
0 answers
2k views

Kerberos Double Hop Delegation from IIS to SQL server (using django)

I need to pass the credentials (Integrated Windows Authentication) from a django website on IIS onto a backend SQL server so that it runs under the proper user context. This is how my setup looks so ...
notarobot's user avatar
11 votes
2 answers
2k views

How can I determine what permissions my user is missing for receiving a ZFS dataset?

I have a FreeNAS (11.1-U1) and a FreeBSD (11.1-RELEASE-p6) machine. On the FreeNAS I'd like to zfs receive recursive snapshots as a non-root user with delegated privileges. This appears to work well ...
sloh's user avatar
  • 161
0 votes
1 answer
128 views

Trouble with domain delegation

I suspect I have a problem with domain delegation. Notes: Following addresses and names are examples I have two public static IPs and own a domain name I'm using Debian 9 and Bind 9 I want ...
Jakub Ejnik's user avatar
1 vote
1 answer
1k views

How to configure delegation in an ASP.Net Core 2.0 app on windows with users authenticated via Azure AD

The Setup: I have a web app written in ASP.NET Core 2.0 that authenticates against Azure AD using OpenID Connect. It is running on a machine that is part of an Azure AD domain. The app does have an ...
Geoff's user avatar
  • 111
1 vote
1 answer
2k views

Active Directory Delegated Permissions grant multiple users access to edit a Global Security group with powershell

Hello Fellow IT Guru’s I am hoping to gain a little knowledge here regarding the ability to manage Active Directory Delegated permissions through powershell. I’ve recently ran into an issue where I ...
M Rahbari's user avatar
1 vote
0 answers
30 views

Delegated Hyper-V Management

I have a small, clustered Hyper-V infrastructure and one of my clients has 7 VMs with me currently. Their IT person would like to get console access to the instances, so if something freezes (as an ...
Scott Salyer's user avatar
0 votes
2 answers
2k views

Keep inheritance enabled for Delegation [closed]

I want to give a normal "Domain Users", permission to reset the password of users in the Domain Admins Group. So I created an OU and moved all the user account targets into it. Then I used "Delegate ...
AlwaysOnandOn's user avatar
0 votes
1 answer
305 views

Delegating reverse dns records - Bind (Ubuntu Server)

I have got a mail server attached to a static provided by my ISP. Our dns service is run by buddyns DNS service because our ISP blocked 53 by default. The DNS service is excellent, but i dont know how ...
mindflame's user avatar
0 votes
1 answer
2k views

How to delegate permission to Mark OU Object as "Protected from Accidental Deletion"

I have created a new OU and delegated its permissions to multiple personnel; unfortunately, when they create a new OU underneath the previous one, the checkbox of "Protect from Accidental Deletion" is ...
Darktux's user avatar
  • 827
-1 votes
1 answer
71 views

Is it possible to add "Prefixes" before namesers?

I've been looking at this website where you enter an input string and you get an output "some_random_string.1.nameserver.io". Now, I'm not sure if this is possible for any nameserver. Say you have ...
anemaria20's user avatar
2 votes
3 answers
7k views

"Permission Denied" creating a new domain-based Dfs root as non-Administrator

I have been tasked to delegate a number of everyday tasks in our domain to a group of technicians which does not have Domain Admins membership. One of these tasks is the creation of new domain-based ...
the-wabbit's user avatar
  • 40.8k
0 votes
1 answer
160 views

Minimum delegation needed in AD for reading Scheduled tasks and Services info

I am trying to monitor Scheduled tasks and Services remotely(from a different domain) on windows servers (domain controllers) ; we are planning to implement a minimum required delegation model for ...
Darktux's user avatar
  • 827
0 votes
1 answer
2k views

PowerShell credSSP session using IP

I need to open a Powershell remote session using credSSP authentication from server A to B. However, server A cannot resolve name of B. CredSSP is enabled on A to pass credentials (in "Allow ...
Petr Snížek's user avatar
1 vote
2 answers
508 views

How to delegate OU permissions to a computer account nested in a security group?

The problem: I can't give a computer account the permissions to add groups to an OU by adding that computer account to a security group that has been granted the permission to add groups to that OU. ...
Tomas's user avatar
  • 91
3 votes
2 answers
2k views

Mimic delegation of control wizard with PowerShell

I want to delegate control of the TestUsers organizational unit to a user NickA and give the following permissions to it: Create, delete, and manage user accounts Reset user passwords and force ...
user01230's user avatar
1 vote
1 answer
357 views

Delegate Specific rights to Helpdesk on AD

Domain Controller - Windows Server 2008 R2 standard I need to delegate only below task to helpdesk id for specific OU i.e 1) Creating User 2) and after creating that user, add them to specific ...
Param's user avatar
  • 1,357
0 votes
1 answer
2k views

Last Name attribute not available for Read/Write in Delegation of Control Wizard

I am using Active Directory Users and Computers version 6.1.7601.17514 I am attempting to delegate the ability for our HR users to edit the First and Last Name for user accounts in Active Directory. ...
ComputerUser5243's user avatar
4 votes
1 answer
286 views

Suggestions For IT Staff Delegation

looking for some suggestions or tips on how to setup our IT admins with delegation and server access. I started at a new organization and saw that every IT staff member is a domain admin. Looks like ...
OJC's user avatar
  • 43
2 votes
1 answer
19k views

With DNS, what is the difference between Delegation, Forwarding, Conditional Forwarding, and Stub zones? [closed]

I am surprised at how many different ways I have read answers to this question and I still don't know the fine differences of the answer. For each of these similar DNS concepts: Delegation ...
Watki02's user avatar
  • 587
0 votes
1 answer
1k views

What kind of SPN is required to delegate client credentials to a SMB Share?

I'm trying to delegate KERBEROS authentication from an SQL Server to a file server over OLEDB. Is there a particular Service Principle Name that is used to delegate credentials from an SQL Server ...
leeand00's user avatar
  • 4,869
2 votes
1 answer
256 views

If I authorize someone to send as me though Exchange Online will I see the sent emails?

Lets assume I am the owner of the mailbox "[email protected]" and via the Exchange Online administration I allow the owner of "[email protected]" to send emails as "[email protected]" while I am out ...
QuantumBITS's user avatar
2 votes
1 answer
315 views

what happens if the authoritative DNS servers and the NS records don't agree

What happens if the NS records in a zone don't agree with the root nameserver delegation for that same zone? In other words, if a registrar knows that the authoritative nameservers for example.com ...
J. Doe's user avatar
  • 21
0 votes
1 answer
4k views

Export/Import Active Directory Permissions Delegations

I have an OU in AD, which has delegated permissions assigned to it. Is there any way/tool to export delegated permissions (or just all security permissions) for an OU and then apply the very same ...
Volodymyr Molodets's user avatar