We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

How do I change the Delegation on all my network computers?

CRIIT
CRIIT asked
on
Medium Priority
262 Views
Last Modified: 2010-03-18
Hi,

We have a Windows Server 2003 network. Right now, if I need to change the delegation of a desktop, I need to logon to the AD, and change the delegation selection under the delegation tab per one computer at a time. Is there a way (maybe like a script) to allow me to change the Delegation of all PCs in our domain? That'd be great. Thanks

J
Comment
Watch Question

What exactly are you wanting to "delegate"?   What are you trying to accomplish?

Author

Commented:
If you open your AD console, and under the Active Directory Users and Computers, open your domain and open the "Computers" folder, select any computer. Click the properties, and there is a tab, Delegation. By default "Do not trust this computer for delegation" is selected, and I want to chenge it to the second one in the list.
Understand that...just curious cause I've never seen anyone actually need this "turned on" so I'm curious what kind of services actually need to use this...just for my own KB... :)

It's not something that can be set through GPO's I think...and you can't select it via multiple computers in ADUC...and I don't know of a script to actually set it.

http://technet2.microsoft.com/WindowsServer/en/Library/b207ee9c-a055-43f7-b9be-20599b694a311033.mspx

That article talks about delegation...which is why I'm so curious why you'd set this on all PCs in your domain?  Is there something running as a service on all pc's that would need this setup?

Also this EE link will help you query AD for this setting:

http://www.experts-exchange.com/Web/Q_21372685.htm





Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
The reason for that is I want to be able to install packages remotely by vb script. I will read that articles and keep you posted. thanks
OK...the only thing I remember someone doing this with is SQL...in fact there is a KB article about it:

http://support.microsoft.com/?id=319723


I'm just not sure if this is the way you need to go....you should be able to install apps using vbscript remotely simply by running them as part of a script that either runs under admin credentials or runs as a computer login script.
Thanks for the points...guessing you got it all working?
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.