Can you expand on this statement?
"I have already applied an instrution to change local user rights"
This should be enabled by default in the Domain Controller policy -- "Enable
computer and user accounts to be trusted for delegation" +r Administrators.
Make sure the you have the user right SeEnableDelegationPrivilege
Also - check the acls on the computer and useraccountcontrol.
steve
----- Original Message -----
From: "Bernard, Aric" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Friday, May 05, 2006 2:33 PM
Subject: RE: [ActiveDir] Trust for delegation error
It sounds like you are configuring this setting on many directory objects:
For what purpose?
What functional level is the domain having these problems and is different
from the other domains?
Aric
Sent from my Windows Mobile 5 device.
-----Original Message-----
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: "[email protected]" <[email protected]>
Sent: 5/5/06 10:59 AM
Subject: [ActiveDir] Trust for delegation error
Hi all,
I have a new problem:
When I try to enbale this option :"Trust Computer for delegation"
for a computer account in DSA.msc I recive this error
"Your security setting do not allow you to Specify whether or not This
account is to be trusted for delagation"
I have already applied an instrution to change local user rights,
But it is still showing that message
The mos strange is that we have 18 subdomains, and it works in
all, but that.
That is happening to user, too, I can not enable "TUST FOR
delegation" for a user account
Is htere a way to solve that problem?
_______________________________________________
Adrião Ferreira Ramos
[EMAIL PROTECTED]
Equipe Suporte Windows
(11) 3388-8193
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
