Enable "Trust computer for delegation" for Web servers

Active Server Pages (ASP) pages running on a Web server can set and reset passwords for users stored in Active Directory only if the Web server is trusted for delegation.

Solution

To enable this option, go to the property sheet for the computer account in Active Directory and make sure the Trust computer for delegation check box is checked.

To set the Trust computer for delegation option

  1. Click Start, point to Program Files, point to Administrative Tools, and then click Active Directory Users and Computers.

  2. Navigate to the computer account that needs to be set, for example, Active Directory Users and Computers/<domain name>/Computers/<computer name>**.

  3. Double-click the computer name in the list on the right. In the Account tab, check the Account is trusted for delegation check box, and then click OK.

You may need to reboot the associated Web server in order for this setting to take effect.


All rights reserved.