Kerberos and Windows Integrated Security do not work

  • Article

If you are troubleshooting a deployment that uses Kerberos, Internet Information Services (IIS) 5.0, and Windows Integrated Security, see the following recommended solution.

Solution

Check to see if the Service Principal Names exists. If you have renamed your computer, the host/NetBIOS and host/DNS names might have been removed. You must reset the host Service Principal Names.

  • Check to see if the computers are in a trusted domain This is required.
  • Check to see if you have removed Named Pipes so that only TCP/IP is configured for the Server Network Utility (SQL Server)
  • Check to see if Network Library=DBMSSOCN exists in a connection string If it does, Kerberos will not work.
  • Check to see whether the Web server's account is trusted for delegation. This is required.

Copyright © 2005 Microsoft Corporation.
All rights reserved.