Hi all Running windows 2003 AD. When I try to enable " Trust this computer for delegation to any service (Kerberos Only) It is giving me the following error The following active directory error occurred : access denied I am a domain admin Can you please help me regarding this.

Use run as an administrator option so that you can do what you want using an elevated prompt. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

on the computer object in question, did you check security tab if you should have the rights or if the objects security is customized? you can check effective permissions under advanced on the security tab. do oyu have 2 dc's? if so, does it happen on both or did you only try one?

Check this similar post. Thanks

Hi Thanks for the answer We ahe about 10 Dc in our environment .It is only happening on one DC which is master Dc.

Hi, To perform the procedure to allow a computer to be trusted for delegation, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority. Since the Domain Administrator user account you used cannot do it, I would like to suggest you switch to the Security tab and compare the settings on other Domain Controller. In addition, you may also try to use a member of Enterprise Admins group to set the “allow a computer to be trusted for delegation”. Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.