A new version of the Kerberos tool DelegConfig is ready. Download it here.

Notable Features:

• Supports IIS 7.0 (useKernelMode / useAppPoolCredentials)

• Allows adding backend servers of type UNC, HTTP, LDAP, OLAP, SQL, SSAS, and RDP

• Allows chaining of multiple hops (versus only a single backend)

• Performs duplicate SPN check against all trusted domains.

• /Set/SPNs.aspx – Allows adding and removing of ServicePrincipalNames

• /Set/Delegation.aspx – Allows changing Trust for Delegation settings.

• /Set/Providers.aspx – Allows correcting of inadequate NTAuthenticationProviders settings.

• /Report.aspx – Gives a picture of what is right and what is wrong.

• /Wizard.aspx – A set of wizard steps that supports adding more tiers to /Report.aspx.

• /Test.aspx – Allows double-hop tests for webServer-to-Sql or webServer-to-fileServer or webServer-to-webServer