DelegConfig v2 beta (Delegation / Kerberos Configuration Tool)

Overview

This is an ASP.NET application used to help troubleshoot and configure IIS and Active Directory to allow Kerberos and delegating Kerberos credentials.

Features

• Supports IIS 6.0 as well as IIS 7.0 (useKernelMode / useAppPoolCredentials)
• Allows adding backend servers of type UNC, HTTP, LDAP, OLAP, SQL, SSAS, and RDP
• Allows chaining of multiple hops (versus only a single backend)
• Performs duplicate SPN check against all trusted domains.
• /Set/SPNs.aspx - Allows adding and removing of ServicePrincipalNames
• /Set/Delegation.aspx - Allows changing Trust for Delegation settings.
• /Set/Providers.aspx - Allows correcting of inadequate NTAuthenticationProviders settings.
• /Report.aspx - Gives a picture of what is right and what is wrong.
• /Wizard.aspx - A set of wizard steps that supports adding more tiers to /Report.aspx.
• /Test.aspx - Allows double-hop tests for webServer-to-Sql or webServer-to-fileServer or webServer-to-webServer

Benefits

Requirements

• IIS 6.0 or IIS 7.0
• ASP.NET 2.0 or higher