Tag Archives: kerberos

Delegate permission to set Kerberos Constrained Delegation in Active Directory

Problem: You try to enable Kerberos Constrained Delegation with a non admin account but you have Full Access over the object. i.e. George has been given Full Access in Active Directory over the OU “Servers”. When he tries to change settings … Continue reading

Posted in Active Directory | Tagged , | Comments Off on Delegate permission to set Kerberos Constrained Delegation in Active Directory

Kerberos Token Size generates problems in IIS

http://blogs.technet.com/b/surama/archive/2009/04/06/kerberos-authentication-problem-with-active-directory.aspx

Posted in Active Directory, Windows | Tagged , , , | Comments Off on Kerberos Token Size generates problems in IIS

Managing SPN with Setspn

Search: setspn -Q <SPN> Add: Add SPN to an account in Active Directory after verifying that no duplicate exist in domain. setspn -S <SPN> <Account> i.e setspn -S http/web.mysite.se DOMAINMyServer Look for duplicates: Look for duplicate SPN:s in domain. You … Continue reading

Posted in Active Directory | Tagged , , , | Comments Off on Managing SPN with Setspn