Hello;

I'm trying to set up a web app that accesses a SQL database on a second
server.  I want to use integrated security and have set the computer account
as trusted for delegation.  I know I need to use setspn to tell Active
Directory that there is an authorized instance of a service of class
"MSSQLSvc" listening on port 1433 on computer FQDN running as service accoun
t
in my domain.  My question deals with the IIS setup.

Does the World Wide Web Publishing Service need to be running under a domain
user account for this, or is having the web server trusted for delegation
enough?

Thanks;
T.

[ Post a follow-up to this message ]

Nevermind, figured it out...

"T. Tyrone" wrote:

> Hello;
>
> I'm trying to set up a web app that accesses a SQL database on a second
> server.  I want to use integrated security and have set the computer accou
nt
> as trusted for delegation.  I know I need to use setspn to tell Active
> Directory that there is an authorized instance of a service of class
> "MSSQLSvc" listening on port 1433 on computer FQDN running as service acco
unt
> in my domain.  My question deals with the IIS setup.
>
> Does the World Wide Web Publishing Service need to be running under a doma
in
> user account for this, or is having the web server trusted for delegation
> enough?
>
> Thanks;
> T.

[ Post a follow-up to this message ]

FWIW:  WWW Publishing Service is only supported when running as LocalSystem.
It is not supported using a domain account to run WWW Publishing Service.

Cheers
Ken

"T. Tyrone" <TTyrone@discussions.microsoft.com> wrote in message
news:9B28BA40-8A12-4533-9F71-5C49E1295668@microsoft.com...
: Nevermind, figured it out...
:
: "T. Tyrone" wrote:
:
: > Hello;
: >
: > I'm trying to set up a web app that accesses a SQL database on a second
: > server.  I want to use integrated security and have set the computer
account
: > as trusted for delegation.  I know I need to use setspn to tell Active
: > Directory that there is an authorized instance of a service of class
: > "MSSQLSvc" listening on port 1433 on computer FQDN running as service
account
: > in my domain.  My question deals with the IIS setup.
: >
: > Does the World Wide Web Publishing Service need to be running under a
domain
: > user account for this, or is having the web server trusted for
delegation
: > enough?
: >
: > Thanks;
: > T.

[ Post a follow-up to this message ]