Need to search for msds-AllowedToDelegateTo: MSSQLSvc/<servername>:1433
i trying trouble shoot constratined delegation issue. , suspect there may multiple registrations of old spn on domain.
is there way use dsquery or ldp search of domain objects msds-allowedtodelegateto: mssqlsvc/<servername>:1433 (replacing <servername> spn value in question)?
john
i use dsquery * -filter:
dsquery * -filter "(msds-allowedtodelegateto=mssqlsvc/myserver*)"
i used * wildcard character.
richard mueller
mvp adsi
Windows Server > Directory Services
Comments
Post a Comment