You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
14 lines
459 B
14 lines
459 B
special notes for s4uproxy:
|
|
|
|
s4uproxy extends SSPI, the cred of ISC caller PROCESS is used
|
|
|
|
1) S4UProxy must be on a server
|
|
|
|
2) must set Trusted-to-Authenticate-for-Delegation (T2A4D) via ldp.exe
|
|
|
|
#define UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0x1000000
|
|
|
|
in the userAccountControl attribute, note ldp.exe only accepts decimal
|
|
|
|
3) must set Allowed-to-Delegate-to (A2D2) via "delegation tab" after raising
|
|
domain functionality levels
|