Re: Active Directory Delegate Tab

I think he's talking about the Kerberos delegation tab where you can
configure delegation, constrained delegation and protocol transition. This
is very different than delegation of administration which is what people
typically talk about on this group when they say the word "delegation".
Kerberos delegation is all about designing distributed authentication on
multi-tier application architectures.

Generally speaking, that tab will automatically be displayed on any user or
computer object that has a servicePrincipalName set on it. However, you may
also need to ensure that the domain and forest are 2003 functional level so
that you get the full delegation features. Otherwise, only the checkbox for
"trust this computer for delegation" may be displayed. Constrained
delegation and protocol transition are 2003 FFL features, so there is no
need to display the UI for those if the current forest can't use them.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:3354B6EE-46F8-4CA9-9252-1B16348F82D4@xxxxxxxxxxxxxxxx
not sure if I understand you...
to see and create trusts you go to Active Directory Domains and Trusts.
To perform AD delegation of control, open Active Directory Users and
Computers and for example right click on domain and choose "delegate
control" option, you can also use the Security tab to delegate rights if
you want.

What exactly are you trying to do?

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Yorgy" <Yorgy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FA17624E-6D94-4962-A74A-B576ACC7A717@xxxxxxxxxxxxxxxx
Hello Jorge,

I am able to see the security tab fine; but I thought there was another
tab
on objects that you can specify trusts with a delegate tab.

Any ideas?


--
Life is a zoo in a jungle!


"Jorge Silva" wrote:

Hi
Delegate tab? Or security Tab?
To security tab you need to enable advanced features under the menu
view.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Yorgy" <Yorgy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C8F401BE-C208-4F53-8300-644BCF2635A6@xxxxxxxxxxxxxxxx
Hello,

Can someone please help me as to why am I not seeing the delegate tab
in
Active Directory when reviewing an account object?

Is this some kind of an activation feature in Active Directory, what
am I
missing here??

Thank you
--
Life is a zoo in a jungle!




.

Relevant Pages

  • Re: Active Directory Delegate Tab
    ... What Joe Kaplan informed is correct, in 2003 will be having that option ... configure delegation, ... that tab will automatically be displayed on any user or ... Joe Kaplan-MS MVP Directory Services Programming ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remove Delegation Tab on user object
    ... I prefer to use other tools for managing SPNs than the setspn tool as I think it is easier to verify results later. ... This tab is also shown on the administrator account. ... Can anyone has any idea how can I revoke the delegation right assigned to ...
    (microsoft.public.windows.server.active_directory)
  • Re: Kerberos delegation
    ... the delegation tab is present for domains at WS2003 functional level. ... Steve Foster [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: Active Directory Delegate Tab
    ... What Joe Kaplan informed is correct, in 2003 will be having that option ... configure delegation, ... that tab will automatically be displayed on any user or ... Joe Kaplan-MS MVP Directory Services Programming ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegate control questions
    ... You can rerun the delegation wizard again or do it manually in security tab. ... You can deny read access, that's one of the reasons for OU creation, but rather then denying to a user you should do this to a security group, same applies to delegation of control. ... Have delegated control to the local admin, so he can create users and groups, reset passwords, add computers to domain. ... Where and how can I see what rights I have delegated to him? ...
    (microsoft.public.windows.server.active_directory)