-
Notifications
You must be signed in to change notification settings - Fork 3
AD DS
Will Brown edited this page Apr 9, 2019
·
10 revisions
WinINet will not automatically send Negotiate credentials to machines that are not marked in the 'Local Intranet' zone. A key learning for me was to also set the 'Wow6432Node' because some worker processes are 32-bit.
- Intranet site is identified as an Internet site when you use an FQDN or an IP address
- Internet Explorer security zones registry entries for advanced users
- Related: SSO to AAD by sending Kerberos credential to the cloud
- Resource Based Delegation in Server 2012
- Impersonation Level Information
- Privileges in Windows
- Library for Managing Privileges in .NET
- Configure Delegation in PowerShell
- Kerberos in IIS
- ASP.NET Impersonation
- ASP.NET Impersonation and IIS
- IIS Errors
- Kerberos Extension Spec
- How Windows Server 2012 Eases the Pain of Kerberos Constrained Delegation, Part 1
- How Windows Server 2012 Eases the Pain of Kerberos Constrained Delegation, Part 2
- Kerberizing Applications Using Security Support Provider Interface
- S4U2Self with GSSAPI