RE: Alternative to Account Delegation?
From: Mike Epprecht (SQL MVP) (mike_at_epprecht.net)
Date: 07/22/05
- Previous message: Mike Epprecht (SQL MVP): "RE: User rights and SOX"
- In reply to: Dan H: "Alternative to Account Delegation?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 21 Jul 2005 23:25:02 -0700
Hi
No. The way the OS has to impersonate and delegate security across machine
boundaries requires this. If there was an easier way, we would all be using
it.
Your admins will need to get used to it. As security gets tightened inside
the OS, you will need to use it more and more.
Regards
--------------------------------
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Dan H" wrote:
> Hello,
> I want to run distributed queries via a linked server using a windows
> autheniticated login. Talking with our AD/network admin about the steps in
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_security_2gmm.asp
>
> they have a problem with setting up account delegation for service account
> and sql server computer, mainly because this is a new precedent and they
> don't want to go there unless absolutely necessary.
>
> Are there any alternatives to doing the above that would enable distributed
> queries using windows authenicated logins?
> Thanks,
> Dan
- Previous message: Mike Epprecht (SQL MVP): "RE: User rights and SOX"
- In reply to: Dan H: "Alternative to Account Delegation?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]