Urgent: Can't set second DC in the domain.

[chetan]

If I try to "check" the Trust computer for delegation
box, it gives the following error,

"Your security settings do not allow you to specify
whether or not this account is to be trusted for
delegation"

-----Original Message-----
Hello Chetan

Go in to AD Users and Computers, Click the Domain Controllers OU. Click the
Domain Controller Computer object and select properties, Ensure the Trust
computer for delegation box is checked.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips




.

..

 

[Laura E. Hunter \(MVP\)]

The user or object that is granted the Trusted for Delegation user right
must have Write access to the account control flags on the user object or
the computer object. A server process that is running on a computer (or
under a user context) that is trusted for delegation can access resources on
another computer by using a client computer's delegated credentials. A
server process can access these resources only if the client's account does
not have the Account cannot be delegated account control flag set.

The Trusted for Delegation user right is defined in the Default Domain
Controller Group Policy object (GPO) and in the local security policy of
workstations and servers.

http://support.microsoft.com/default.aspx?scid=kb;en-us;325894