Alternative to Account Delegation?

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Dan H - 21 Jul 2005 00:13 GMT

Hello,
I want to run distributed queries via a linked server using a windows
autheniticated login. Talking with our AD/network admin about the steps in

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_sec
urity_2gmm.asp

they have a problem with setting up account delegation for service account
and sql server computer, mainly because this is a new precedent and they
don't want to go there unless absolutely necessary.

Are there any alternatives to doing the above that would enable distributed
queries using windows authenicated logins?
Thanks,
Dan

Reply to this Message

Mike Epprecht (SQL MVP) - 22 Jul 2005 07:25 GMT

Hi

No. The way the OS has to impersonate and delegate security across machine
boundaries requires this. If there was an easier way, we would all be using
it.

Your admins will need to get used to it. As security gets tightened inside
the OS, you will need to use it more and more.

Regards
--------------------------------
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland

MVP Program: http://www.microsoft.com/mvp

Blog: http://www.msmvps.com/epprecht/

> Hello,
> I want to run distributed queries via a linked server using a windows
[quoted text clipped - 10 lines]
> Thanks,
> Dan

Reply to this Message