TopicActive Directory →
Simple definition
The forced delegation Kerberos limits the services to which an identity may delegate authentication.
Technical definition
The forced delegation Kerberos limits the services to which an identity can delegate authentication. In the business environment, its configuration must be consistent with the network architecture, the safety policies and capabilities of the equipment concerned.
What is it used for?
control double-hop Kerberos.
Practical example
A web server delegates to a specific SQL service.
Common issues
- Inconsistent configuration
- Compatibility or version
- Incomplete dependency diagnosis
Key takeaway: Always adapt the diagnosis to the product version and the architecture actually deployed.