|
Posted by Ondrej Sevecek on April 17, 2008, 11:51 pm
Please log in for more thread options thank you, but I think, I do not understand your meaning well.
My problem is that the RODC is actually "trusted for delegation to any
service without even specifying which one". Is it true?
ondra.
> so that you can add the account you want. have more detail here:
>
http://blogs.technet.com/askds/archive/2008/02/15/read-only-domain-controllers-and-account-lockouts.aspx
>
> HTH
>
> "Ondrej Sevecek" <ondra at sevecek.com> wrote in message
>> Hello,
>>
>> RODC account is automatically enabled to "be trusted for delegation to
>> any authentication protocol". But the list is empty.
>>
>> What does this mean exactly? I understand the "any" which means S4U, but
>> what does the EMPTY list mean?
>>
>> Does it mean, that it is trusted even for ANY service?
>>
>> ondra.
>>
|