Troubleshooting

KB - The delegation tab is not available

Affects product

Active Directory

Question or problem

The Delegation tab, which is used in Allow Kerberos constrained delegation in a single domain setup, is not available.

Procedure-related prerequisites

You need to run the commands with administrative permissions. Open PowerShell via Run as administrator.

You need to be logged in as a domain administrator on a domain controller.

Example values

User logon name: srv-airlock-kerberos
SPN: http/airlock-gateway-production

Instruction

Test execution and verification:

Run the following commands:
Terminal box
```
setspn -L srv-airlock-kerberos
```

The output shows that the SPN http/airlock-gateway-production is registered to the system user.

Example

In case of failure:

If no SPN is registered, follow along Enable Kerberos constrained delegation for the system user
Verify the domain functional level

Further information and links

Outdated links or content?

In case of outdated links or bad content, please let us know by sending an email with a short description of your findings. Thank you very much!