I have successfully setup the Kerberos Delegation between a ASP.Net web site and a SQL Server. All the users in the same domain of the IIS application pool account and SQL Server service account can be delegated from the web site to SQL server. Now we have
users from a two-way trusted domain try to use the web site, and the following error occurred at the SQL Server side: "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. It means the delegation has failed.
The web site is IIS 6 on Windows 2003.
I checked the user from the trusted domain, and the "userAccountControl" is 512 so delegation is not blocked. In the user IE browser settings, I can the "Local Intranet" has been configured right.
Can someone tell me how I can troubleshoot this issue?
Microsoft is conducting an online survey to understand your opinion of the Msdn Web site. If you choose to participate, the online survey will be presented to you when you leave the Msdn Web site.