Skip Navigation

Remove resource based Kerberos constrained delegation

  1. Open the
    Windows PowerShell
    (run as administrator).
  2. Complete one of the following tasks:
    • To remove the delegation from a server, type
      Set-ADComputer <
      server_name
      > -PrincipalsAllowedToDelegateToAccount $null
      .
      If you have multiple file share or
      Microsoft SharePoint
      servers in your environment, complete this step for each server.
    • To remove the delegation from a user, type
      Set-ADUser <
      user_name
      > -PrincipalsAllowedToDelegateToAccount $null
      .
      If you use different usernames for the
      Microsoft SharePoint
      and file share servers, complete this step for each username.
  3. Press
    Enter
    .