此计算机必须为委派而被信任_信任计算机和用户帐户用于委派（Windows 10） - Windows security | Microsoft Docs...

信任计算机和用户帐户可以执行委派Enable computer and user accounts to be trusted for delegation

04/19/2017

本文内容

适用范围Applies to

Windows 10Windows10

介绍 "允许计算机和用户帐户受信任以供委派安全策略" 策略设置的最佳做法、位置、值、策略管理和安全注意事项。Describes the best practices, location, values, policy management, and security considerations for the Enable computer and user accounts to be trusted for delegation security policy setting.

参考Reference

此策略设置确定哪些用户可以在用户或计算机对象上设置受信任委派设置。This policy setting determines which users can set the Trusted for Delegation setting on a user or computer object.

安全帐户委派提供连接到多台服务器的功能，并且每个服务器更改保留原始客户端的身份验证凭据。Security account delegation provides the ability to connect to multiple servers, and each server change retains the authentication credentials of the original client. 身份验证的委派是客户端和服务器应用程序在具有多个层时使用的一项功能。Delegation of authentication is a capability that client and server applications use when they have multiple tiers. 它允许面向公众的服务使用客户端凭据对应用程序或数据库服务进行身份验证。It allows a public-facing service to use client credentials to authenticate to an application or database service. 为使此配置成为可能，客户端和服务器必须在受信任委派的帐户下运行。For this configuration to be possible, the client and the server must run under accounts that are trusted for delegation.

只有使计算机和用户帐户受信任的委派凭据的管理员才能设置委派。Only adminis