Question about Permission Chaining & Linked Servers

  • Greetings!

    I am running into an issue that I am hoping might be an easy fix. I am fairly new to the administration side of SQL, but have been a user for many years. Recently I set up my own instance of 2012 on my work desktop computer. I also have a laptop, which I use the same DOMAIN/NTID and PW to log into both machines.

    I have setup my server instance, lets call it "MyServer" to use Windows Authentication only. I can connect to it just fine from either the desktop, or my laptop, or both at the same time, and run queries/perform maintenance without issues. Now, I added a linked server to a production data server (r2008) to my instance on my desktop. I have it configured to run under the current logins security context (i think that was the option), and when I am on my desktop I can query the linked server with no issues, either from SSMS, or through an ADO connection via Excel VBA. However, if I connect from my laptop - still using the same DOMAIN/NTID, I get an error when attempting to hit the linked server, and the msg states that NT/ANONYMOUS has been disallowed, or whatever.

    So clearly, it's not passing on my windows credentials when I am connecting to my desktop server remotely.

    Is there a way to configure this, so that I can hit the linked server (for which I have access) from my instance without being connected ON my desktop computer (where the instance is running)?

    I do most of my work via my Laptop, but I am using my desktop to host the instance because it's always on and there are other users within the business that are using my desktop instance for work.

  • That sounds like a Kerberos double hop issue. This article gives some information as to what that is:

    https://sqlbadboy.wordpress.com/2013/10/11/the-kerberos-double-hop-problem/

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply