How to Configure Windows to Enable Security Account Delegation

Delegation creates a service that takes over your user account to access resources inside the network. Configuring Windows Server to enable account delegation allows these services into your trusted delegations zone. A delegation can then be used whenever a new client requires access to your services using a set of protocols.

Instructions

1. Click the "Start" button, and then the "Control Panel" link. Double-click the "Administrative Tools" option, and then the "Active Directory Users and Computers" option.

2. Click the "Computers" option in the console tree (DomainName/Computers).

3. Right-click the computer you wish to allow for trusted delegation. Select the "Properties" option from the menu.

4. Click the "Trust this computer for delegation to any service (Kerberos only)" check box on the Delegation tab, and then the "OK" button.

Tips & Warnings

• You must have be the appropriate delegated authority to change any security account settings.

References

• Microsoft TechNet: To Allow a Computer to be Trusted for Delegation