Your network contains an Active Directory domain named contoso.com.
You create a user account named User1. The properties of User1 are shown in the exhibit. (Click the Exhibit
button.)
You plan to use the User1 account as a service account. The service will forward authentication requests to
other servers.
You need to ensure that you can view the Delegation tab from the properties of the User1 account.
What should you do first?
A.
Configure the Name Mappings of User1.
B.
Modify the user principal name (UPN) of User1.
C.
Configure a Service Principal Name (SPN) for User1.
D.
Modify the Security settings of User1.
Explanation:
If you cannot see the Delegation tab, do one or both of the following:
Register a Service Principal Name (SPN) for the user account with the Setspn utility in the support tools on
your CD. Delegation is only intended to be used by service accounts, which should have registered SPNs,
as opposed to a regular user account which typically does not have SPNs.Raise the functional level of your domain to Windows Server 2003. For more information, see Related
Topics.
http://blogs.msdn.com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not-available-until-a-spn-isset.aspx
http://technet.microsoft.com/en-us/library/cc739474(v=ws.10).aspx
