Resource Based Kerberos Constrained Delegation

-

hi,

we trying configure resource-based kerberos constrained delegation cifs across domain forest boundary between 2 windows server 2012 r2 domains.

we have users in internal domain try connecting file share in resource domain via web server, in user domain.

looking @ functionality in windows server 2012 looks should possible, struggling find documentation on this.

has set before or point me in right direction.

thanks,

tim

that wasn't answer. user asking resource based kerberos constrained delegation in server 2012+

this windows pro magazine article better answer 1 gave. 

http://windowsitpro.com/security/how-windows-server-2012-eases-pain-kerberos-constrained-delegation-part-2

it's obscure topic...and it's not terribly documented.

these forums need pick quality of answers. not trying pick on you. been noticing trend.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

for loop and start-job from cmd.exe

-
hello, i have simple script developed debug purposes: $serverlist = @( "sca-c1cor01", "scb-c1cor01" ) ($i=0; $i -lt $serverlist.length; $i++) { start-job -scriptblock {$x=0} } i have saved script off file called test.ps1.  when run ./test.ps1 within interactive powershell runs fine.  i trying to call script dos window, sql server agent command job, or start->run line.  here syntax using: cmd.exe /c powershell -nologo -noninteractive "c:\scripts\powershell\test.ps1" when run way (from dos window), diaglog box pops says: powershell has stopped working  problem caused program stop working correctly.  windows close program , notify if solution available. i close , open eventvwr.msc.  2 pieces of info.  1 application , services log (windows powershell): engine state changed available stopped. details:  newenginestate=stopped  previousenginestate...
Read more

Edit Group Policy

-
i have pc has power settings pushed out default domain policy in ad environment. of course on local machine "some settings managed system adminstrator". the machine temporarily no longer in contact domain controller (it's been physically moved , not on same network now) can't updated gpo settings. i believe if edit local group policy won't make difference because of group policy processing , precedence. since it's temporary away ad network, still want use settings of ad user. is there somewhere in registry stored can edit power plan manually until can sync domain? (i need prevent sleeping while plugged in - it's set 1 hour) thanks! allen crist i found site: http://gpsearch.azurewebsites.net/#7916 i able add policy to hkey_local_machine\software\policies\microsoft\power using specs found on site. looks solved issue. i'll report if didn't. thanks! allen crist ...
Read more

adam.Events.xml could not enumerate

-
i warning in windows server 2012. because of ad not talk dns. what cause of , how can rectify it? thanks hi, please refer below explanation: windows server 2012 - server manager troubleshooting guide, part ii: troubleshoot manageability status errors in server manager http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-2012-server-manager-troubleshooting-guide-part-ii-troubleshoot-manageability-status-errors-in-server-manager.aspx regards, cicely Windows Server  >  Directory Services
Read more