Trust Computer for Delegation

[tduplantis]

I am trying to turn this on for one of my servers with IIS installed. I am getting a message "Your security settings do not allow you to specify whether or not this account is to be trusted for delegation" when i try to apply the setting. I am in domain admin group, and enterprise admin group and I have tried with the administrator account. Any suggestions on how to fix this? The domain I am trying this on has been upgraded, a couple of months ago, from NT 4.0.

 

[globalstrata]

This is due to the fact that the domain where you are trying to do this cannot resolve the name using its own DNS/WINS. Manually add an Entry or create a host/lmhost file and once you do the trust, you can set the DNS and WINS servers to replicate to each other and Delete any Manual Entries.
Gladys Rodriguez
GlobalStrata Solutions

http://www.globalstrata.com

 

[tduplantis]

Are you saying my domain name is can't be resolved? I can ping my domain name fine. However, I can't ping the netbios name for our domain. Is that what you are referring to?

 

[globalstrata]

Can you ping and trace the Domain and server name of Domain 2 from Domain 1? What about the other way?
Gladys Rodriguez
GlobalStrata Solutions

http://www.globalstrata.com

 

[tduplantis]

I am in a single domain and I am trying to turn on Trust Computer for Delegation to get the Integrated Windows Authentication working for one of my IIS boxes.