
Microsoft
®
Windows Server
™
2003 White Paper
Windows NT 4.0 Server Upgrade Guide 100
As an example, Credential Manager provides quick access to stored user names and passwords.
To see this, open Control Panel and select Stored User Names and Passwords to display the
following interface, which was designed to be intuitive to work with:
Figure 48. Stored User Names and Passwords dialog box
Constrained Delegation
Delegation is the act of allowing a service to impersonate a user account or computer account so
that it can access resources throughout the network. Constrained delegation is a new feature in
Windows Server 2003 that enables you to limit delegation to specific services and to control the
particular network resources the service or computer can use. For example, a service that was
previously trusted for delegation to access another computer on behalf of a user can now be
constrained to use its delegation privilege only to that computer and not to other computers or
services.
As an example of how constrained delegation works, open the Active Directory Users and
Computers view, and then select Computers. Right-click a computer you want to trust for
delegation, and then click Properties. Select the Delegation tab to display the following dialog
box.
Kommentare zu diesen Handbüchern