How do I change the Delegation on all my network computers?


We have a Windows Server 2003 network. Right now, if I need to change the delegation of a desktop, I need to logon to the AD, and change the delegation selection under the delegation tab per one computer at a time. Is there a way (maybe like a script) to allow me to change the Delegation of all PCs in our domain? That'd be great. Thanks

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

What exactly are you wanting to "delegate"?   What are you trying to accomplish?
CRIITAuthor Commented:
If you open your AD console, and under the Active Directory Users and Computers, open your domain and open the "Computers" folder, select any computer. Click the properties, and there is a tab, Delegation. By default "Do not trust this computer for delegation" is selected, and I want to chenge it to the second one in the list.
Understand that...just curious cause I've never seen anyone actually need this "turned on" so I'm curious what kind of services actually need to use this...just for my own KB... :)

It's not something that can be set through GPO's I think...and you can't select it via multiple computers in ADUC...and I don't know of a script to actually set it.

That article talks about delegation...which is why I'm so curious why you'd set this on all PCs in your domain?  Is there something running as a service on all pc's that would need this setup?

Also this EE link will help you query AD for this setting:


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Cloud Class® Course: Microsoft Azure 2017

Azure has a changed a lot since it was originally introduce by adding new services and features. Do you know everything you need to about Azure? This course will teach you about the Azure App Service, monitoring and application insights, DevOps, and Team Services.

CRIITAuthor Commented:
The reason for that is I want to be able to install packages remotely by vb script. I will read that articles and keep you posted. thanks
OK...the only thing I remember someone doing this with is fact there is a KB article about it:

I'm just not sure if this is the way you need to should be able to install apps using vbscript remotely simply by running them as part of a script that either runs under admin credentials or runs as a computer login script.
Thanks for the points...guessing you got it all working?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.