RE: Alternative to Account Delegation?

From: Mike Epprecht (SQL MVP) (mike_at_epprecht.net)
Date: 07/22/05

  • Next message: Hari Prasad: "Re: User rights problem"
    Date: Thu, 21 Jul 2005 23:25:02 -0700
    
    

    Hi

    No. The way the OS has to impersonate and delegate security across machine
    boundaries requires this. If there was an easier way, we would all be using
    it.

    Your admins will need to get used to it. As security gets tightened inside
    the OS, you will need to use it more and more.

    Regards
    --------------------------------
    Mike Epprecht, Microsoft SQL Server MVP
    Zurich, Switzerland

    MVP Program: http://www.microsoft.com/mvp

    Blog: http://www.msmvps.com/epprecht/

    "Dan H" wrote:

    > Hello,
    > I want to run distributed queries via a linked server using a windows
    > autheniticated login. Talking with our AD/network admin about the steps in
    >
    > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_security_2gmm.asp
    >
    > they have a problem with setting up account delegation for service account
    > and sql server computer, mainly because this is a new precedent and they
    > don't want to go there unless absolutely necessary.
    >
    > Are there any alternatives to doing the above that would enable distributed
    > queries using windows authenicated logins?
    > Thanks,
    > Dan


  • Next message: Hari Prasad: "Re: User rights problem"