Question
You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server.
You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From the remote PowerShell session, you attempt to access a resource on Server3, but access to the resource is denied.
You need to ensure that your credentials are passed from Server1 to Server3. The solution must minimize administrative effort.
What should you do?
- A. Configure Kerberos constrained delegation. Correct
- B. Configure Just Enough Administration (JEA).
- C. Configure selective authentication for the domain.
- D. Disable the Enforce user logon restrictions policy setting for the domain.
Explanation
Configuring Kerberos constrained delegation allows Server2 to pass the credentials of the user signed in on Server1 to Server3 for accessing resources, thereby resolving the access issue with minimal administrative effort.
