Kerberos unconstrained delegation for MS SQL svc account

5 pts.
Tags:
Kerberos
MSSQL
SQL Server permissions
SQL Server security
Can an MS SQL service account run non-SQL services if "trust this user for delegation to any service (Kerberos only) has been enabled?

Answer Wiki

Thanks. We'll let you know when a new response is added.

Yes. The account which runs the SQL Service is just a Windows account. It can be configured to run any service on the computer.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Calicdaj
    [...] 8. Mr. Denny strikes again with his SQL knowledge, answering Calicdaj’s question about Kerberos unconstrained delegation for MS SQL svc account. [...]
    0 pointsBadges:
    report
  • Sorio
    Hello, I've done this (IIS Impersonation + Constrained Kerberos Delegation) on IIS 6 and MSSQL2005. Now I'm doing a similar thing on IIS 7 and MSSQL 2008, but constrained delegation is not working (Selecting MSSqlSVC and port of the server). I tried unconstrained (Trust this computer for delegation to any service (Kerberos only)) and it does work. Does anyone have any clue? Thanks
    10 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following