Answer the question
In order to leave comments, you need to log in
How do I set up delegation for a group managed account?
There is an IIS server that provides access to a shared folder on a file server using the WebDAV protocol. Accordingly, Kerberos and Resource Based Constrained Delegation are used. If the application pool runs under the NetworkService account, then for delegation we use the command
Set-ADComputer -Identity "FileServer$" -PrincipalsAllowedToDelegateToAccount (Get-ADComputer -Identity "IISServer$")
Set-ADComputer -Identity "FileServer$" -PrincipalsAllowedToDelegateToAccount (Get-ADServiceAccount -Identity "WebDAVService$")
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question