I attached the sample code from the article as requested.

Derek

Yes, good call! I will supply the code a bit later today once I get home. Thank you!

Derek

Hi Paul,

Great article! I immediately checked my backups and realized that I was already doing this because WITH CHECKSUM is the default for compressed backups (http://technet.microsoft.com/en-us/library/ms186865.aspx). I just wanted to...

patboner (12/18/2013)

---

Hi Derek!

Yes, it works for one user. My problem is that I would like this right to be granted to a OU and not to an individual user. Kind...

rstone (12/17/2013)

---

I think I was confusing delegation with impersonation. As a sysadmin, I sometimes use EXECUTE AS to impersonate a login to test permissions. In this case, once...

patboner (12/18/2013)

---

Quote: "SPNs (Server Principal Names) need to be generated for all servers involved. This can be automatic by giving the AD account that is used as the service account...

rstone (12/17/2013)

---

When the trust for delegation is enabled, can I, as a sysadmin, use SQL Server to impersonate the domain admin account?

We have a vendor that claimed they...

EdgeOfKnowWare (12/17/2013)

---

SPNs (Server Principal Names) need to be generated for all servers involved. This can be automatic by giving the AD account that is used as the service account...

Thanks William, this is a limitation of NTLM as described in the article. So it seems like...

Jeff Moden (12/17/2013)

---

Between the content of this article and the addition recommendations from Mr. Kelly, this is a definite keeper. Thank you both for taking the time to help...

William The Last Man (12/17/2013)

---

Hi Derek,

Have you verified that both user accounts are connecting using Kerberos authentication?

[William]. No. It's different authentications using for these TWO accounts connections. NTLM; KERBEROS.

Has...

William The Last Man (12/17/2013)

---

Another issue I want to share is that one user (domain\user1) get the error after trying to access the linked server:

"Login Failed for user 'NT...

K. Brian Kelley (12/17/2013)

---

Please use constrained delegation (selecting the 3rd option) if configuring Kerberos delegation. It's considered a significant security risk to use unconstrained delegation (where any server can be...

Great point Gail! The more memory you have, the more you need to manage mappings. Appreciate the clarification. That is a great book from Jonathan and Ted.

Derek

Do you plan on using replication on this server? If so, setting the min memory may be something to consider (http://technet.microsoft.com/en-us/library/ms151791.aspx). I am guessing this would be a...